CVE-2026-108946: Apache Software Foundation: Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB

Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. The ActiveMQ broker resolves connection, session and consumer state from ids that are user provided and in some scenarios does not validate that they ids are bound to that user. This allows an authenticated client...

Fedora 44 : nsd (2026-24b48c1f89)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-24b48c1f89 advisory. Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve corre...

Fedora 43 : nsd (2026-447c66a9bc)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-447c66a9bc advisory. Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve corre...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-86192)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86192 advisory. 10.0.114-1.0.2 - Add support for Oracle Linux - build dotnet-host 10.0.114-1 - Update to .NET SDK 10.0.114 and Runtime 10.0.14 - Resolves: RHEL-291741...

Linux Distros Unpatched Vulnerability : CVE-2026-121115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged...

Linux Distros Unpatched Vulnerability : CVE-2026-121240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted netwo...

MiracleLinux 8 : mod_auth_openidc:2.3 cjose-0.6.1-2.module+el8+2073+d16a3b86, mod_auth_openidc-2.3.7-3.module+el8+2073+d16a3b86 (AXSA:2026-2245:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2245:01 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description bloc...

Linux Distros Unpatched Vulnerability : CVE-2026-121062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system acces...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8964-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8964-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 16.04 LTS : Swift Mailer vulnerability (USN-8986-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8986-1 advisory. Dawid Golunski discovered that Swift Mailer did not properly sanitize e-mail addresses in the mail transport. A remote attacker could possibly use this issue to...

Linux Distros Unpatched Vulnerability : CVE-2026-121220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system acce...

RHEL 10 : pipewire (RHSA-2026:94997)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94997 advisory. PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: RAOP RTSP NULL Deref...

AlmaLinux 8 : gcc-toolset-15-gcc (ALSA-2026:90915)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90915 advisory. gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 Tenable has extracted the preceding...

Fedora 44 : unshield (2026-1a569ece37)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1a569ece37 advisory. Validate the file table against the header size Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : unshield (2026-3a7914c436)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3a7914c436 advisory. Validate the file table against the header size Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Ubuntu 16.04 LTS : BitlBee vulnerabilities (USN-8977-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8977-1 advisory. It was discovered that BitlBee incorrectly handled file transfer connections that expired when built with libpurple. A remote attacker could possibly use...

Linux Distros Unpatched Vulnerability : CVE-2026-121173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-92431)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92431 advisory. 10.0.114-1.0.2 - Add support for Oracle Linux - build dotnet-host 10.0.114-1 - Update to .NET SDK 10.0.114 and Runtime 10.0.14 - Resolves: RHEL-291741 10.0.113...

OpenJDK 8 <= 8u382 / 11.0.0 <= 11.0.20 / 17.0.0 <= 17.0.8 / 21.0.0 <= 21.0.0 Multiple Vulnerabilities (2023-10-17)

The version of OpenJDK installed on the remote host is 8 prior to or at 8u382 / 11.0.0 prior to or at 11.0.0 / 17.0.0 prior to or at 17.0.8 / prior to or at 21.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-10-17 advisory. Please Note: Java CVEs do not alway...

Linux Distros Unpatched Vulnerability : CVE-2026-121207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML...