1509 matches found
Oracle Linux 9 : php:8.2 (ELSA-2026-40416)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-40416 advisory. php 8.2.32-1 - rebase to 8.2.32 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040 2.0.3-3 -...
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issue in Aurora PostgreSQL using the AWS Advanced JDBC Wrapper Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege...
Alibaba Cloud Linux 3 : 0203: cups (ALINUX3-SA-2026:0203)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0203 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-34980: OpenPrinting CUPS is an open source...
IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.8 (7280131)
The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7280131 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3506 more potentially affected by CVE-2026-54490 via websocket-driver (>=0.3.5, <=0.7.4)
websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54490 Source advisory: SNYK:JS-WEBSOCKETDRIVER-17987674...
GHSA-X9G3-XRWR-CWFG vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
Missing Release of Memory after Effective Lifetime
Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Use After Free
Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Uncaught Exception
Overview std/net is a Go standard library package std/net Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report:Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. Remediation Upgrade std/net to...
PYSEC-2026-2725 open-webui Vulnerable to Stored XSS via Model Description
!IMPORTANT Relationship to CVE-2024-7990 CVE-2024-7990 issued by huntr.dev, March 2025 describes a stored XSS in the same field — the model description — but exploits a different bypass mechanism: a second-order injection through the sanitizeResponseContent function's video-tag placeholder...
Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-8527-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8527-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...
GHSA-MFV4-W78F-M8F3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JGCH-4H46-4Q53 vulnerabilities
Vulnerabilities for packages: chromium...
SUSE SLED15: Multiple Vulnerabilities (SUSE-RU-2026:2816-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-RU-2026:2816-1 advisory. Changes in python-aioresponses: - Switch to pyproject macros. - Update to 0.7.8 feat: integer repeat fix: case repeat=1...
GHSA-HPG9-WR8W-WG43 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-HMQR-Q436-X68F vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PV8J-6V7F-J6H8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3M3V-363X-RF9H vulnerabilities
Vulnerabilities for packages: chromium...