Security Updates for Microsoft Visio Products C2R (September 2025)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by a remote code execution vulnerability that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relied on...

Security Updates for Microsoft Word Products C2R (September 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2022-28658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing CVE-2022-28658 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2024-0048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This...

Linux Distros Unpatched Vulnerability : CVE-2015-6580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85, allow attackers to cause a denial of service ...

Linux Distros Unpatched Vulnerability : CVE-2021-39569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function OpAdvance located in swfaction.c. It allows an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2022-0425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side...

Fedora 41 : loupe (2025-458d5882a1)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-458d5882a1 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Linux Distros Unpatched Vulnerability : CVE-2016-4586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

Linux Distros Unpatched Vulnerability : CVE-2023-39743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c. CVE-2023-39743 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2019-15547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are...

Linux Distros Unpatched Vulnerability : CVE-2020-13628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to...

Linux Distros Unpatched Vulnerability : CVE-2021-3647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - URI.js is vulnerable to URL Redirection to Untrusted Site CVE-2021-3647 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-45437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site...

Linux Distros Unpatched Vulnerability : CVE-2022-0555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions CVE-2022-0555 Note that Nessus relies on the presence of the package as reporte...

Linux Distros Unpatched Vulnerability : CVE-2016-3877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Android before 2016-09-01 has unknown impact and attack vectors. CVE-2016-3877 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2022-22890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an Assertion 'argumentstype != SCANNERARGUMENTSPRESENT && argumentstype != SCANNERARGUMENTSPRESENTNOREG' failed at...

Linux Distros Unpatched Vulnerability : CVE-2018-1002161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rebase to Koji 1.16.2 for CVE-2018-1002161 CVE-2018-1002161 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 8090...

Linux Distros Unpatched Vulnerability : CVE-2018-1000556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can...

Linux Distros Unpatched Vulnerability : CVE-2021-39564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfDumpActions located in swfaction.c. It allows an attacker...