2094 matches found
GHSA-MX64-MJ3Q-7PRJ vulnerabilities
Vulnerabilities for packages: dapr, bento, splunk-otel-collector-fips, bento-fips, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, dapr-fips, splunk-otel-collector...
Photon OS 5.0: Linux PHSA-2026-5.0-91-0794
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0794. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Linux PHSA-2026-5.0-91-0771
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0771. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Libxml2 PHSA-2026-5.0-92-0874
An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Ghost: Server-Side Request Forgery in Image Fetching
Impact A Server-Side Request Forgery SSRF in Ghost Admin allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on internal hosts. Vulnerable versions This vulnerability is present in Ghost...
3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1079 more potentially affected by CVE-2026-16729 via undici (>=8.0.0, <=8.8.0)
undici NPM version =8.0.0, =0.1.3, =0.1.8, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-16729 Source...
3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1079 more potentially affected by CVE-2026-16728 via undici (>=8.0.0, <=8.8.0)
undici NPM version =8.0.0, =0.1.3, =0.1.8, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-16728 Source...
br.com.swconsultoria:java-cte (>=3.00.4, <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3, <=3.00.4) +1215 more potentially affected by CVE-2026-14682 via org.bouncycastle:bcprov-jdk16 (>=1.38, <=1.46)
org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1-alpha1, =2.1-alpha1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2026-14682 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518092...
RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - thrift (Important) (RHSA-2026:49715)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:49715 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...
RockyLinux 10 : kernel (RLSA-2026:49211)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49211 advisory. kernel: ksm: use range-walk function to jump over holes in scangetnextrmapitem CVE-2025-68211 kernel: isofs: validate Rock Ridge CE continuation extent...
CGA-2JX5-3MJJ-GM59
Bulletin has no description...
GHSA-5VJC-7CXW-4W6J
creationtimestamp| type| source ---|---|--- 2026-07-31 19:31:28+00:00| seen| https://gist.github.com/alon710/de1c5b8263f3d3a5d1101a3c2a0269ab...
leanplum-sdk (1.13.0) potentially affected by CVE-2025-51684 via clevertap-web-sdk (1.9.2)
clevertap-web-sdk NPM version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on clevertap-web-sdk and may be impacted: - leanplum-sdk 1.13.0 Source cves: CVE-2025-51684 Source advisory: SNYK:JS-CLEVERTAPWEBSDK-18508175...
CLEANSTART-2026-RG39411 Security fixes in druid-exporter-fips 0.10-r1
Package druid-exporter-fips version 0.10-r1 fixes 3 vulnerabilities: CVE-2025-61729, CVE-2025-61727, ghsa-4f99-4q7p-p3gh...
NASA Core Flight System (cFS) Health & Safety (HS) Application
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...
02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +11397 more potentially affected by CVE-2026-67213 via nanoid (>=3.0.0, <=3.3.16)
nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-67213 Source advisory: SNYK:JS-NANOID-18506897...
02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +11406 more potentially affected by CVE-2026-67213 via nanoid (>=3.0.0, <=3.3.17)
nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-67213 Source advisory: OSV:GHSA-2V37-7H3G-55P8...
korvath (1.0.0) potentially affected by unknown CVE via korvica (1.0.0)
korvica NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on korvica and may be impacted: - korvath 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KORVICA-18503747...