EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-3320)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized...

NewStart CGSL MAIN 7.02 : openssh Multiple Vulnerabilities (NS-SA-2026-0101)

The remote NewStart CGSL host, running version MAIN 7.02, has openssh packages installed that are affected by multiple vulnerabilities: - ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re- exchange. This outcome occurs only on the client side...

Oracle Linux 10 : ELSA-2026-65162-0: / gpsd (ELSA-2026-651620)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-651620 advisory. 3.26.1-3.0.1.el102.2 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.2 - fix another command injection in gpsprof CVE-2026-60122 Tenable has...

EulerOS 2.0 SP12 : perl-HTTP-Tiny (EulerOS-SA-2026-3369)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx...

Fedora 43 : chirp (2026-23b8df7771)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23b8df7771 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...

NewStart CGSL MAIN 7.02 : libsoup3 Vulnerability (NS-SA-2026-0089)

The remote NewStart CGSL host, running version MAIN 7.02, has libsoup3 packages installed that are affected by a vulnerability: - A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing...

NewStart CGSL MAIN 7.02 : gstreamer1 Multiple Vulnerabilities (NS-SA-2026-0093)

The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1 packages installed that are affected by multiple vulnerabilities: - GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...

EulerOS 2.0 SP12 : perl-DBI (EulerOS-SA-2026-3366)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an...

EulerOS 2.0 SP12 : bzip2 (EulerOS-SA-2026-3250)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

RHEL 9 : libvirt (RHSA-2026:65516)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65516 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

Debian dsa-6489 : gir1.2-gst-plugins-base-1.0 - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6489 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6489-1 [email protected] https://www.debian.org/security/ Moritz...

EulerOS 2.0 SP12 : libXfont2 (EulerOS-SA-2026-3272)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-3339)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 When processing HTTP/...

Fedora 43 : baresip / libre (2026-3edf59885d)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-3edf59885d advisory. Baresip v4.11.0 2026-08-25 - core: cleanup streamrtph ignore handling - audio: increase RTP timestamp also for underruns - aubuf: remove adaptive mode -...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2026-3288)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

EulerOS 2.0 SP12 : python-pillow (EulerOS-SA-2026-3300)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when giv...

NewStart CGSL MAIN 7.02 : xpdf Multiple Vulnerabilities (NS-SA-2026-0109)

The remote NewStart CGSL host, running version MAIN 7.02, has xpdf packages installed that are affected by multiple vulnerabilities: - In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes ...

EulerOS 2.0 SP12 : acl (EulerOS-SA-2026-3321)

According to the versions of the acl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileg...

Linux Distros Unpatched Vulnerability : CVE-2026-6377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Next4Biz Information Technologies Inc. CSM Customer Service...

EulerOS 2.0 SP12 : mod_http2 (EulerOS-SA-2026-3358)

According to the versions of the modhttp2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP requests...