CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: prism...

WordPress Themify Builder < 7.5.8 - Open Redirect

The Themify Builder WordPress plugin before version 7.5.8 contains an open redirect vulnerability. The plugin does not validate the tbredirectfail parameter before redirecting users to its value, which could allow attackers to redirect users to malicious websites. id: CVE-2024-3032 info: name:...

CVE-2026-60807

CVE-2026-60807 —Oracle E-Business Suite, Oracle Bills of Material (Internal Operations) is affected in versions 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges, after user interaction from a target, can compromise Oracle Bills of Material, potentially leading to takeo...

ROOT-OS-UBUNTU-2204-CVE-2025-71289 CVE-2025-71289 in rootio-linux - Patched by Root

Root has patched CVE-2025-71289 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

Gitea 1.22.0 - Cross-Site Scripting

Gitea 1.22.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to inject malicious scripts that get stored on the server and executed in the context of another user's session. id: CVE-2024-6886 info: name: Gitea 1.22.0 - Cross-Site Scripting...

UBUNTU-CVE-2026-63847

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-50493 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

SUSE-SU-2026:2948-1 Security update for perl-HTML-Parser

This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in decodeentities bsc1267606...

ROOT-OS-DEBIAN-11-CVE-2026-46187 CVE-2026-46187 in rootio-linux - Patched by Root

Root has patched CVE-2026-46187 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

EulerOS 2.0 SP12 : libpng (EulerOS-SA-2026-2601)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In...

OESA-2026-2957 nmap security update

Nmap "Network Mapper" is a free and open source license utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fixes: Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured...

CVE-2026-47829

creationtimestamp| type| source ---|---|--- 2026-07-09 08:26:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq77krzyza2e 2026-07-09 17:36:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6blpc522y 2026-07-13 16:52:09+00:00| seen|...

OESA-2026-2878 freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fixes: ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI...

CVE-2026-14658

creationtimestamp| type| source ---|---|--- 2026-07-05 02:30:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpujspwprh2g...

Oracle Linux 9 : libreoffice (ELSA-2026-28290)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28290 advisory. - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has Tenable has extracted the preceding description block directly from th...

CVE-2023-37524

HCL Traveler for Microsoft Outlook HTMO is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerabl...

Linux Distros Unpatched Vulnerability : CVE-2026-54275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the serverhostname TLS SNI check can be bypassed when an existi...

MiracleLinux 8 : dracut-049-244.git20260529.el8_10 (AXSA:2026-806:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-806:01 advisory. dracut: dracut: Root code execution via DHCP options command injection CVE-2026-6893 Tenable has extracted the preceding description block directly from the...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2026:2453-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2453-1 advisory. This update for java-180-ibm fixes the following issues - CVE-2026-22007: APIs in the specified component can lead to an unauthorized read acce...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (=6.8.0), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0 <=8.8.1) +184 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (>=6.0.0 <=6.9.1)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.8.1 and more Source cves: CVE-2026-55470 Source advisory: SNYK:JAVA-CAUHNHAPIFHIR-17375098...