TencentOS Server 2: gstreamer1-plugins-bad-free (TSSA-2026:0940)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0940 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

AlmaLinux 9 : nodejs:24 (ALSA-2026:55603)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55603 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

Mozilla Thunderbird < 140.15

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-87 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...

Alibaba Cloud Linux 3 : 0275: attr (ALINUX3-SA-2026:0275)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0275 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54371: attr before version 2.6.0 contains ...

PT-2026-84176

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird ESR versions prior to 153.2 Description A use-after-free issue exists in the Graphics: WebGPU component, which could lead to...

PT-2026-84171

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A use-after-free issue exists in the JavaScript: GC component. Use-after-free is a memory...

EasyAppointments 1.5.1 - Blind SQL Injection

Exploit Title: EasyAppointments 1.5.1 - Blind SQL Injection Google Dork: N/A backend login required Date: 07/27/2026 Exploit Author: Michael Chesang Vendor Homepage: https://easyappointments.org Software Link: https://github.com/alextselegidis/easyappointments/releases Version: = 1.5.1 REQUIRED...

openSUSE 16 Security Update : go1.25-openssl (openSUSE-SU-2026:21696-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21696-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: -...

PT-2026-84098

Incorrect Authorization vulnerability in ash-project ash widens a relationship's parent... scoping filter to match unintended records when the referenced parent field cannot be resolved. Loading a relationship whose filter references parent... resolves that expression against the parent record...

RHEL 8 : libssh (RHSA-2026:62218)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62218 advisory. libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh:...

AlmaLinux 9 : dbus-broker (ALSA-2026:61355)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:61355 advisory. dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup CVE-2026-16730 Tenable has extracted the preceding description block directly...

PT-2026-84563

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A use after free issue exists in Shared Tab Groups. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by inducing a user to visi...

PT-2026-84545

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in the Proxy component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-84557

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in WebRTC, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use aft...

PT-2026-84562

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A use after free issue exists in WebGL, which occurs when a program continues to use a pointer after it has been freed. This allows a remote attacker to execute arbitrary cod...

PT-2026-84560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in the TabStrip component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

Linux Distros Unpatched Vulnerability : CVE-2026-84131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15,...

Alibaba Cloud Linux 3 : 0262: abrt (ALINUX3-SA-2026:0262)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0262 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54228: A time-of-check time-of-us...

PT-2026-84138

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a...

PostgreSQL 17.x < 17.11 / 18.x < 18.6 GSSAPI Improper Message Integrity Enforcement

The version of PostgreSQL installed on the remote host is 17 prior to 17.11 or 18 prior to 18.6. As such, it is potentially affected by a security bypass vulnerability: - Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.con...