252783 matches found
Ubuntu 24.04 LTS / 26.04 LTS / 26.10 : zlib vulnerability (USN-8954-1)
The remote Ubuntu 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8954-1 advisory. Ali Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger...
RockyLinux 10 : postgresql16-pgvector (RLSA-2026:88359)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:88359 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description...
Linux Distros Unpatched Vulnerability : CVE-2026-115504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for...
Oracle Linux 10 : postgresql16-pgvector (ELSA-2026-88359)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-88359 advisory. - CVE-2026-103484 postgresql16-pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build execution via out-of-bounds wri...
MiracleLinux 9 : postgresql:16 (AXSA:2026-2114:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2114:01 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding descripti...
RockyLinux 9 : httpd (RLSA-2026:88229)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:88229 advisory. httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in modproxyuwsgi CVE-2026-63718 httpd: httpd: Denial of Service via integer...
Oracle Linux 9 : httpd (ELSA-2026-88229)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88229 advisory. - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in modvhostalias CVE-2026-63292 - Resolves: RHEL-280369 - httpd:...
Linux Distros Unpatched Vulnerability : CVE-2026-93518
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize CVE-2026-93518 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-98969
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: emtext: reject unterminated algo before autoload This is a follow-up to commit 9c572a83037a net/sched: fix potential stack infoleak in emtextdump,...
PT-2026-121777
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability check when updating a post through one of its front-end form actions, allowing unauthenticated visitors to overwrite arbitrary...
AlmaLinux 9.6 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792791669)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792791669 advisory. - xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling CVE-2026-88812 -...
Rocky Linux 9.6 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792791669)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792791669 advisory. - xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling CVE-2026-88812 -...
Linux Distros Unpatched Vulnerability : CVE-2026-93516
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 Note that Nessus relies on the presence of...
Linux Distros Unpatched Vulnerability : CVE-2026-93519
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in inputconstraincursor CVE-2026-93519 Note that Nessus relies on the presence of...
Linux Distros Unpatched Vulnerability : CVE-2026-93520
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling CVE-2026-93520 Note that Nessus relies on the presenc...
CVE-2025-45528
An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code by processing a crafted PDF file. This vulnerability is associated with CWE-94 (Improper Control of Generation of Code) . The documents do not provide specific details regarding the un...
Linux Distros Unpatched Vulnerability : CVE-2026-93517
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow CVE-2026-93517 Note that Nessus relies on the presence...
PT-2026-122138
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...
