WordPress Symposium <=15.8.1 - Cross-Site Scripting

WordPress Symposium through 15.8.1 contains a reflected cross-site scripting vulnerability via the wp-content/plugins/wp-symposium/getalbumitem.php?size parameter which allows an attacker to steal cookie-based authentication credentials and launch other attacks. id: CVE-2015-9414 info: name:...

Apache HTTP Server - Remote Code Execution

Apache HTTP Server 2.4.32 to 2.4.44 contains an info disclosure and possible remote code execution caused by a vulnerability in modproxyuwsgi, letting remote attackers access sensitive information and potentially execute arbitrary code, exploit requires sending crafted requests. id: CVE-2020-1198...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: The issue related to GPF in bitmapgetstats has been fixed. The commit message for commit 6ec1f0239485 “md/md-bitmap: fix stats collection for external bitmaps” states: “Remove the external bitmap check, as statistic...

Chromium: Monthly Vulnerability Update (September 2026)

Palo Alto Networks incorporated the following Chromium security fixes into our products: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop28.html Work around: No known workarounds exist for this issue...

ROOT-OS-UBUNTU-2204-CVE-2025-38708 CVE-2025-38708 in linux - Patched by Root

Root has patched CVE-2025-38708 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-31344 CVE-2025-31344 in giflib - Patched by Root

Root has patched CVE-2025-31344 in the giflib package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-62462

creationtimestamp| type| source ---|---|--- 2026-08-19 16:45:28+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CLEANSTART-2026-ES11075 Security fixes in argo-events 1.9.10-r1

Package argo-events version 1.9.10-r1 fixes 17 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33186, ghsa-mh2q-q3fh-2475, CVE-2026-29181...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2026-42887)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42887 advisory. 1:17.0.20.0.8-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.0.8-1.1 - Sync java-17-openjdk-portable.specfile from...

Chromium: Monthly Vulnerability Update (August 2026)

Palo Alto Networks incorporated the following Chromium security fixes into our products: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop28.html Work around: No known workarounds exist for this issue...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0926

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0926. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Git PHSA-2024-5.0-91-0271

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0271. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLSA-2025-1759709174 TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-lang3 to address 1 CVE. Fixed in 3.4-tuxcare.1...

RHEL 8 : RHCS 10.8 update (Important) (RHSA-2026:48095)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:48095 advisory. Red Hat Certificate System RHCS is a complete implementation of an enterprise software system designed to manage enterprise Public Key...

SUSE SLED15: apache-commons-compress / apache-commons-lang3 / beust-jcommander / etc (SUSE-SU-2026:3390-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3390-1 advisory. apache-commons-lang3 was updated to 3.20.0: New features: - Add SystemProperties.getPathString, Supplier - Add...

CVE-2026-60817

creationtimestamp| type| source ---|---|--- 2026-07-23 17:47:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

SUSE SLED15 / SLES15 Security Update : patch (SUSE-SU-2026:3161-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3161-1 advisory. This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause...

Security update for python-paramiko

This update for python-paramiko fixes the following issue CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

PT-2026-60223

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description An issue exists involving improper control of a resource through its lifetime. A remote attacker could exploit this flaw to cause a denial of service DoS, which is a condition where a...

Chromium: CVE-2026-14077 Incorrect security UI in Select

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...