Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : libsoup vulnerabilities (USN-8975-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8975-1 advisory. It was discovered that libsoup incorrectly handled certain WebSocket frames. A remote attacker could possibly use this...

TencentOS Server 2: bind (TSSA-2026:1360)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1360 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-103995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...

CVE-2026-90634: Apache Software Foundation Apache OpenOffice: An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF…

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

Ubuntu 22.04 LTS : Relax-and-Recover vulnerability (USN-8988-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8988-1 advisory. It was discovered that Relax-and-Recover created a world-readable initrd when GRUBRESCUE was enabled. A local attacker could possibly use this issue to obtain...

Fedora 43 : python3.9 (2026-37bcaf6ef8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-37bcaf6ef8 advisory. - Security fix for CVE-2026-11940 - Security fix for CVE-2026-15308 Tenable has extracted the preceding description block directly from the Fedora...

Linux Distros Unpatched Vulnerability : CVE-2026-120650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits. $CGI::POSTMAX...

CVE-2026-92211: Pixar Animation Studio OpenUSD: Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio OpenUSD. Interaction with this library is required to exploit this...

Linux Distros Unpatched Vulnerability : CVE-2026-111362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. django.contrib.gis.gdal.OGRGeometry does not restrict external...

Linux Distros Unpatched Vulnerability : CVE-2026-54880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ofono - None CVE-2026-54880 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2026-94459: I.R.I.S S.A. IRISPowerscan: IRISPowerscan contain default user accounts with predictable credentials

IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-8961-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8961-1 advisory. Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilitie...

TencentOS Server 3: kernel (TSSA-2026:1342)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1342 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: kernel (TSSA-2026:1343)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1343 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-121926: Improper Authentication

A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the function WebMvcConfig.addInterceptors of the component Web Management API. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is...

CVE-2025-71456: vtenext: vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject…

vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted fieldname parameter to modules/Fax/EditView.php. Attackers can read arbitrary database contents, including password reset tokens stored in...

CVE-2026-121933: Linksys E5350: A flaw has been found in Linksys E5350 1.0.00.037

A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function savesettings of the file /wizard/apply.cgi of the component Setup Wizard. Executing a manipulation of the argument wizardrouterpwd can lead to missing authentication. The attack may be launched remotely. The exploit has...

Linux Distros Unpatched Vulnerability : CVE-2026-120431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processin...

Fedora 43 : chromium (2026-0168c5c231)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0168c5c231 advisory. Update to 156.0.8078.73, include 21 security fixes CVE-2026-119260: Use after free in Frames CVE-2026-119261: Improper input validation in Skia...

Fedora 44 : chromium (2026-3e0794fe4b)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3e0794fe4b advisory. Update to 156.0.8078.73, include 21 security fixes CVE-2026-119260: Use after free in Frames CVE-2026-119261: Improper input validation in Skia...