Rocky Linux 8 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc (crlsa-2025_18070)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202518070 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2025-43343 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-102578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries,...

Linux Distros Unpatched Vulnerability : CVE-2026-102579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other studen...

CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777970333)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777970333 advisory. - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before...

RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 6.2.5 (RHSA-2026:73981)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73981 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...

CVE-2026-47096

AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamIDSystemName value through the /config?action=set web configuration API. Attackers can...

CVE-2026-47096 AJA HELO Plus < 2.1.7 Stored XSS via System Name Parameter

AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamIDSystemName value through the /config?action=set web configuration API. Attackers can...

CVE-2026-47096

AJA HELO Plus firmware versions before 2.1.7 are vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is an unsanitized eParamID_SystemName value accepted through the /config?action=set web configuration API. Unauthenticated attackers with network access can inject malicious Jav...

CVE-2026-103432

A flaw was found in apcupsd. A remote attacker could exploit a stack-based buffer overflow vulnerability in the web monitoring interface by supplying specially crafted data during variable parsing. A successful attack could allow the attacker to execute arbitrary code on the system or cause a...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: mcp-atlassian, kserve-lgbserver, ansible-operator-fips, jupyterhub-k8s-singleuser-sample, openstack-client-2026.1, dagster, openstack-keystone-2025.1-fips, datadog-agent, kserve-sklearnserver, pgadmin4, litellm, openstack-keystone-2026.1, az, k8s-sidecar, mlrun,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: mcp-atlassian, kserve-lgbserver, ansible-operator-fips, jupyterhub-k8s-singleuser-sample, openstack-client-2026.1, dagster, openstack-keystone-2025.1-fips, datadog-agent, kserve-sklearnserver, pgadmin4, litellm, openstack-keystone-2026.1, az, k8s-sidecar, mlrun,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines, jupyter-base-notebook, dask-kubernetes, kubeflow-katib, k8s-sidecar, kubeflow-volumes-web-app, kserve, datadog-agent, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, ggshield, az...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines, jupyter-base-notebook, dask-kubernetes, kubeflow-katib, k8s-sidecar, kubeflow-volumes-web-app, kserve, datadog-agent, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, ggshield, az...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper validation checks...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...