CVE-2026-0672 affecting package python3 for versions less than 3.12.9-8

CVE-2026-0672 affecting package python3 for versions less than 3.12.9-8. A patched version of the package is available...

Photon OS 4.0: Python3 PHSA-2026-4.0-0953

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0953. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2026-4.0-0954

Updates of 'python3-dnspython' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2026-1192)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2026-1141)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLEANSTART-2026-NR68832 libexpat in Expat before 2

Multiple security vulnerabilities affect the python3 package. libexpat in Expat before 2. See references for individual vulnerability details...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager

CVE-2009-3999 HP Power Manager 4.2 Build 7 exploit inspire...

Oracle Linux 10 : python-urllib3 (ELSA-2026-1086)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-1086 advisory. - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 Tenable has extracted the preceding description block directly from the Oracle Lin...

Exploit for OS Command Injection in Mantisbt

CVE-2019...

AZL-75219 CVE-2026-1299 affecting package python3 for versions less than 3.9.19-18

The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email foldin...

Fedora 42 : mingw-python3 (2026-01a62f2cfd)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-01a62f2cfd advisory. Backport proposed fix for CVE-2025-13836. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Azure Linux 3.0 Security Update: python3 (CVE-2023-6507)

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6507 advisory. - An issue was found in CPython 3.12.0 subprocess module on POSIX platforms. The issue was fixed in CPython...

Fedora: Security Advisory (FEDORA-2026-01a62f2cfd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-009cb3c02a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : mingw-python3 (2026-009cb3c02a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-009cb3c02a advisory. Backport proposed fix for CVE-2025-13836. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Oracle Linux 10 : gpsd (ELSA-2026-0770)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0770 advisory. - fix buffer overflow in NMEA2000 driver CVE-2025-67268 Tenable has extracted the preceding description block directly from the Oracle Linux security...

AZL-75032 CVE-2026-0865 affecting package python3 for versions less than 3.12.9-8

User-controlled header names and values containing newlines can allow injecting HTTP headers...

AZL-75053 CVE-2026-0865 affecting package python3 for versions less than 3.9.19-19

User-controlled header names and values containing newlines can allow injecting HTTP headers...

AZL-75038 CVE-2025-15367 affecting package python3 3.12.9-9

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

AZL-75035 CVE-2025-11468 affecting package python3 for versions less than 3.12.9-8

When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized...