openSUSE 16: acl / attr / libacl-devel / libacl1 / libattr-devel / etc (openSUSE-SU-2026:21832-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21832-1 advisory. This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via...

Linux Distros Unpatched Vulnerability : CVE-2026-98727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifie...

Oracle Linux 10 : environment-modules (ELSA-2026-80664)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-80664 advisory. 5.6.1-2.1 - fix command injection in bash Tab completion CVE-2026-85013 RHEL-260562 Tenable has extracted the preceding description block directly from the...

Siemens SIMATIC S7-1500 TM MFP Integer Overflow or Wraparound (CVE-2026-23395)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix accepting multiple L2CAPECREDCONNREQ Currently the code attempts to accept requests regardless of the command identifier which may cause multiple requests to be marked as pending FLAGDEFERSETUP which can cau...

Linux Distros Unpatched Vulnerability : CVE-2026-113496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-machines. When saving Virtual Network Computing VNC console settings, the configured password is passed directly as a command-line...

Ubuntu 26.10 : OpenSSH vulnerabilities (USN-8937-1)

The remote Ubuntu 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8937-1 advisory. It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controllin...

Alibaba Cloud Linux 3 : 0311: tomcat (ALINUX3-SA-2026:0311)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0311 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-52316: Unchecked Error Condition...

Siemens SIMATIC S7-1500 TM MFP Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2025-21738)

In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSIIOCTLSENDCOMMAND ioctl with outlen set to 0xd42, SCSI command set to ATA16 PASS-THROUGH, ATA command set to ATANOP, and...

RHEL 10 : rust-sequoia-sq (RHSA-2026:85848)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:85848 advisory. Command-line frontends for Sequoia. Security Fixes: hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46064)

In the Linux kernel, the following vulnerability has been resolved: ibmasm: fix heap over-read in ibmasmsendi2omessage The ibmasmsendi2omessage function uses getdotcommandsize to compute the byte count for memcpytoio, but this value is derived from user-controlled fields in the dotcommandheader...

Linux Distros Unpatched Vulnerability : CVE-2026-113386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequenc...

Oracle Linux 9 : dovecot (ELSA-2026-80825)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80825 advisory. - fix CVE-2026-33605: ManageSieve protocol denial of service via lone CR character RHEL-251989 - fix CVE-2026-42007: use-after-free in pigeonhole...

Linux Distros Unpatched Vulnerability : CVE-2026-98479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsitcp: Check the data direction of a Data-In PDU The Data-In branch of iscsitcphdrdissect resolves the ITT to a task and copies the PDU's data segme...

Fedora 46 : dolphin (2026-77dc014196)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-77dc014196 advisory. Automatic update for dolphin-26.08.2-2.fc46. Changelog Fri Oct 16 2026 Than Ngo - 26.08.2-2 - Fix rhbz2553643 - CVE-2026-110236 dolphin: dolphin: Arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-98600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifie...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31705)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2getea EA alignment smb2getea applies 4-byte alignment padding via memset after writing each EA entry. The bounds check on buffreelen is performed before the value memcpy, but the alignment...

CVE-2024-50972

CVE-2024-50972 Description A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrowid parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code...

prismsec

PrismSec 🔷 Secure, modular MCP server for pentesting tools. Wraps 7 industry-standard security tools nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap into 13 registered MCP tools — ready to use with Claude, Cursor, Copilot, and any MCP-compatible AI agent. Features Feature| Description...

CVE-2026-81780-Hash-Form

CVE-2026-81780-Hash-Form CVE-2026-81780 — Hash Form RCE The Vulnerability Unauthenticated file upload in WordPress Hash Form plugin ≤ 1.4.2. The plugin allows arbitrary file uploads without proper authentication or file type validation, leading to Remote Code Execution RCE. Exploit Chain Step...

external_expat_AOSP10_r33_CVE-2022-25236

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...