Lucene search
+L

389487 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.8 views

Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2026-56966)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56966 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239048 - Fix CVE-2026-18649 in H.264/H.265 RTP depayloaders...

7.5CVSS5.4AI score0.00615EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.6 views

Fedora 44 : python3.14 (2026-2c124fcf93)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2c124fcf93 advisory. Update to Python 3.14.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

8.7CVSS5.6AI score0.0075EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.6 views

SUSE SLES12 Security Update : rsync (SUSE-SU-2026:3629-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3629-1 advisory. - CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. - CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls bsc1264514. Tenabl...

7.8CVSS5.5AI score0.00152EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.7 views

RHEL 7 : java-1.8.0-openjdk (RHSA-2026:55774)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55774 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

6.8CVSS5.5AI score0.00302EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-102691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102691 advisory. A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska ...

3.3CVSS5.4AI score0.00116EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.8 views

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:56658)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:56658 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

7.5CVSS6.1AI score0.00577EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.6 views

RHEL 9 : gegl04 (RHSA-2026:56963)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:56963 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffe...

7.8CVSS8.3AI score0.00592EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.9 views

AlmaLinux 8 : sg3_utils (ALSA-2026:56130)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:56130 advisory. sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output conformance...

7.6CVSS5.9AI score0.00241EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.7 views

Oracle Linux 8 : nghttp2 (ELSA-2026-55804)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55804 advisory. 1.33.0-6.3 - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 Tenable has extracted the...

6.3CVSS5.8AI score0.00263EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.11 views

PT-2026-78593

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...

5.9CVSS5.4AI score0.00437EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.9 views

PT-2026-78717

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

9.1CVSS5.4AI score0.00317EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.11 views

PT-2026-78864

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the H.245 protocol dissector can lead to a crash, resulting in a denial of service. A protocol dissector is a software...

4.7CVSS5.2AI score0.001EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.7 views

PT-2026-78865

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the X.509IF protocol dissector can lead to a crash, resulting in a denial of service. Recommendations Update Wireshark...

7.5CVSS5.2AI score0.00284EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.16 views

PT-2026-78396

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description The software fails to persist the WebAuthn login challenge generated by the prepareForLogin function because the WebAuthn controller does not save the mutated key objects back to the database. Durin...

9.1CVSS5.3AI score0.00292EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.11 views

PT-2026-78575

Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a company-scoped user in FMCS floater mode can access users whose company id is null because broad API queries and bulk web actions do not consistently apply isCurrentUserHasAccess. The /api/v1/users and /api/v1/users/id/licenses...

7.6CVSS5.3AI score0.00259EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.8 views

RHEL 8 : gstreamer1-plugins-good (RHSA-2026:56966)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56966 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

7.5CVSS5.6AI score0.00615EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.11 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libssh2 (UTSA-2026-102688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102688 advisory. libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap...

7.7CVSS5.8AI score0.00252EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.9 views

Fedora 44 : python3.12 (2026-a9f0296a41)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a9f0296a41 advisory. A security update of the Python interpreter. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

7.8CVSS7.5AI score0.00811EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-102686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102686 advisory. Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versionsfrom 8.2. before 8.2.33, from 8.3. before 8.3.3...

9.8CVSS6.1AI score0.00468EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.8 views

Oracle Linux 8 : sg3_utils (ELSA-2026-56130)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56130 advisory. 1.44-6.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188162 Tenable has extracted the preceding description block directly from the...

7.6CVSS5.5AI score0.00241EPSS
SaveExploits0References2
Rows per page
Query Builder