GHSA-MFV4-W78F-M8F3 vulnerabilities

Vulnerabilities for packages: chromium...

SUSE SLED15: Multiple Vulnerabilities (SUSE-RU-2026:2816-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-RU-2026:2816-1 advisory. Changes in python-aioresponses: - Switch to pyproject macros. - Update to 0.7.8 feat: integer repeat fix: case repeat=1...

GHSA-HMQR-Q436-X68F vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HPG9-WR8W-WG43 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PV8J-6V7F-J6H8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3M3V-363X-RF9H vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4HMJ-JQ37-HMF2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HC37-V37P-G4X2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MPGH-VPQ3-4C7P vulnerabilities

Vulnerabilities for packages: chromium...

CGA-585J-Q6WP-PFW5

Bulletin has no description...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the user endpoint in the /tequilapi/config API. An attacker can overwrite configuration settings and gain full control of the node by sending a specially crafted POST request. Remediation Upgrade...

CGA-7FM4-XQX9-FVMR

Bulletin has no description...

Fedora 44 : upower (2026-e5305cffc2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e5305cffc2 advisory. upower 1.91.3: Feature: up-device-battery: Prefer Standard over Fast charging !316 merged, 344 closed Fix: Resolve potential leaks !327 merged Fix: Potential...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21421 more potentially affected by CVE-2026-59869 via js-yaml (>=3.0.0, <=3.14.2)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-59869 Source advisory: SNYK:JS-JSYAML-17900054...

Fedora 43 : python-fastar (2026-0f558e63db)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0f558e63db advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Juniper Junos OS Vulnerability (JSA110085)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA110085 advisory. - A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged...

RHEL 9 : redhat-ds:12 (RHSA-2026:36641)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36641 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

Fedora 44 : python-pillow-jxl-plugin (2026-8c2e409ea5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8c2e409ea5 advisory. Update to 1.3.7, and update PyO3 to 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block...

jupyter-scheduler's endpoint is missing authentication

Impactjupyterscheduler is missing an authentication check in Jupyter Server on an API endpoint GET /scheduler/runtimeenvironments which lists the names of the Conda environments on the server. In affected versions, jupyterscheduler allows an unauthenticated user to obtain the list of Conda...

Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access

Impact When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socket on cluster nodes. A local attacker would be able to access Envoy admin endpoints. Depending on deployment configuration, this can expose sensitive...