Ubuntu 16.04 LTS : Swift Mailer vulnerability (USN-8986-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8986-1 advisory. Dawid Golunski discovered that Swift Mailer did not properly sanitize e-mail addresses in the mail transport. A remote attacker could possibly use this issue to...

Linux Distros Unpatched Vulnerability : CVE-2026-121220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system acce...

RHEL 10 : pipewire (RHSA-2026:94997)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94997 advisory. PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: RAOP RTSP NULL Deref...

AlmaLinux 8 : gcc-toolset-15-gcc (ALSA-2026:90915)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90915 advisory. gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 Tenable has extracted the preceding...

Fedora 44 : unshield (2026-1a569ece37)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1a569ece37 advisory. Validate the file table against the header size Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : unshield (2026-3a7914c436)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3a7914c436 advisory. Validate the file table against the header size Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Ubuntu 16.04 LTS : BitlBee vulnerabilities (USN-8977-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8977-1 advisory. It was discovered that BitlBee incorrectly handled file transfer connections that expired when built with libpurple. A remote attacker could possibly use...

Linux Distros Unpatched Vulnerability : CVE-2026-121173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-92431)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92431 advisory. 10.0.114-1.0.2 - Add support for Oracle Linux - build dotnet-host 10.0.114-1 - Update to .NET SDK 10.0.114 and Runtime 10.0.14 - Resolves: RHEL-291741 10.0.113...

OpenJDK 8 <= 8u382 / 11.0.0 <= 11.0.20 / 17.0.0 <= 17.0.8 / 21.0.0 <= 21.0.0 Multiple Vulnerabilities (2023-10-17)

The version of OpenJDK installed on the remote host is 8 prior to or at 8u382 / 11.0.0 prior to or at 11.0.0 / 17.0.0 prior to or at 17.0.8 / prior to or at 21.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-10-17 advisory. Please Note: Java CVEs do not alway...

Linux Distros Unpatched Vulnerability : CVE-2026-121207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML...

Oracle Linux 8 : glibc (ELSA-2026-80798)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80798 advisory. - CVE-2026-77117: Non-progress DoS in SHIFTJISX0213 decoding RHEL-248056 - CVE-2026-80489: Non-progress DoS in EUCJISX0213 decoding RHEL-249638 -...

MiracleLinux 9 : dotnet8.0-8.0.132-1.el9_8.ML.1 (AXSA:2026-2161:21)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2161:21 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET...

RockyLinux 8 : freerdp (RLSA-2026:94510)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:94510 advisory. freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling CVE-2026-109242 freerdp: freerdp: Denial of Service via heap-based buffe...

RHEL 8 : bind9.16 (RHSA-2026:95017)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95017 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

Linux Distros Unpatched Vulnerability : CVE-2026-121136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access...

Linux Distros Unpatched Vulnerability : CVE-2026-121242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network...

Linux Distros Unpatched Vulnerability : CVE-2026-121175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium...

AlmaLinux 9.6 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793815103)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793815103 advisory. - FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in...

Linux Distros Unpatched Vulnerability : CVE-2026-121159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access...