Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...

Microsoft SharePoint - Remote Code Execution

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. id: CVE-2020-16952 info: name: Microsoft SharePoint - Remote Code Execution author: dwisiswant0 severity: high description: Microsoft SharePoint is vulnerabl...

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-91636)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-91636 advisory. 2.54.2-1 - Update to 2.54.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Fedora 44 : python3.12 (2026-e102eccf7f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e102eccf7f advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Microsoft SQL Server Reporting Services - Remote Code Execution

Microsoft SQL Server Reporting Services is vulnerable to a remote code execution vulnerability because it incorrectly handles page requests. id: CVE-2020-0618 info: name: Microsoft SQL Server Reporting Services - Remote Code Execution author: joeldeleep severity: high description: Microsoft SQL...

Oracle Linux 9 : flatpak (ELSA-2026-89850)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89850 advisory. - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272190 Tenable has extracted the preceding description...

Oracle Linux 10 : flatpak (ELSA-2026-89849)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89849 advisory. - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272185 Tenable has extracted the preceding description...

Oracle Linux 9 : lrzsz (ELSA-2026-89755)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89755 advisory. - Backport tightened path handling from 0.13.1 CVE-2026-105840 Tenable has extracted the preceding description block directly from the Oracle Linux...

Fedora 46 : live555 / vlc (2026-cad2480b8a)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-cad2480b8a advisory. Latest upstream release of live555. Multiple security-relevant bug fixes, see: https://download.live555.com/changelog.txt . Tenable has extracted the precedi...

Oracle Linux 10 : oci-seccomp-bpf-hook (ELSA-2026-89752)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89752 advisory. - Rebuild for CVE-2026-111943 - rebuild with golang to fix CVE-2026-33811 Tenable has extracted the preceding description block directly from the...

Fedora 45 : brotli / perl-Alien-Brotli (2026-6a639d1308)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-6a639d1308 advisory. Fixes CVE-2026-111497 in new upstream release of brotli-1.2.1 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 44 : perl-Text-CSV_XS (2026-035fae971f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-035fae971f advisory. Current upstream release, with several security fixes. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : perl-Cpanel-JSON-XS (2026-3ab4727120)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3ab4727120 advisory. Current upstream release, with multiple security fixes, updates for performance and correctness. Tenable has extracted the preceding description blo...

Fedora 43 : pgbouncer (2026-343329cfec)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-343329cfec advisory. Update to 1.26.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : pgbouncer (2026-20b7549bd1)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-20b7549bd1 advisory. Update to 1.26.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Oracle Linux 10 : grafana-pcp (ELSA-2026-88316)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-88316 advisory. 5.3.0-8.2 - Rebuilt against updated golang - Resolves RHEL-287474, RHEL-279348, RHEL-278699 Tenable has extracted the preceding description block...

Fedora 44 : knot-resolver (2026-97432ec1d3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-97432ec1d3 advisory. New upstream release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 44 : golang-x-mobile (2026-596bcd713b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-596bcd713b advisory. Upgrade with minor security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Oracle Linux 10 : podman (ELSA-2026-88336)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88336 advisory. - Rebuild for CVE-2026-111943 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Rocky Linux 9.6 [CIQ] Security Update: ipa-client / ipa-client-common / ipa-client-encrypted-dns / etc (ciqsa-2026_1661)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261661 advisory. This advisory aggregates security fixes for the ipa SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-76578. Tenable has extracted the preceding description block...