493 matches found
TinaCMS - Path Traversal
TinaCMS CLI 2.1.8 contains a file system read vulnerability caused by disabled Vite server.fs.strict setting, letting unauthenticated attackers read arbitrary files on the host system, exploit requires access to the dev server. id: CVE-2026-29066 info: name: TinaCMS - Path Traversal author:...
ROOT-OS-DEBIAN-11-CVE-2026-6276 CVE-2026-6276 in curl - Patched by Root
Root has patched CVE-2026-6276 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-45956 CVE-2026-45956 in linux - Patched by Root
Root has patched CVE-2026-45956 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-64311 CVE-2026-64311 in linux - Patched by Root
Root has patched CVE-2026-64311 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-43309 CVE-2026-43309 in linux - Patched by Root
Root has patched CVE-2026-43309 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-53157 CVE-2026-53157 in linux - Patched by Root
Root has patched CVE-2026-53157 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-64475 CVE-2026-64475 in linux - Patched by Root
Root has patched CVE-2026-64475 in the linux package for Root:Debian:12. Multiple fixed versions available...
RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - aom (Important) (RHSA-2026:51146)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51146 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...
EulerOS 2.0 SP13 : python-paramiko (EulerOS-SA-2026-3041)
According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...
Photon OS 5.0: Coredns PHSA-2026-5.0-90-0869
An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0869. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
MiracleLinux 8 : nodejs:24 (AXSA:2026-1455:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1455:01 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed...
MiracleLinux 8 : libgcrypt-1.8.5-8.el8_10 (AXSA:2026-1461:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1461:01 advisory. Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 Tenable has extracted the preceding description block...
Photon OS 5.0: Samba PHSA-2026-5.0-91-0733
An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0733. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
MiracleLinux 8 : python-pillow-5.1.1-23.el8_10 (AXSA:2026-1435:02)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1435:02 advisory. Pillow: Pillow: Native heap out-of-bounds write CVE-2026-59197 Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image...
RHEL 8 : compat-libtiff3 (RHSA-2026:47183)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:47183 advisory. The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This...
Fedora 44 : nebula (2026-12d6749851)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-12d6749851 advisory. Update to 1.11.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
RockyLinux 10 : nodejs22 (RLSA-2026:48033)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:48033 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed ta...
SUSE CVE-2026-53487
unknown...
CVE-2026-54522
CVE-2026-54522 affects MessagePack for Ruby prior to 1.8.2, where MessagePack::Buffer#clear can leave internal rmem pointers stale after a chunk return, enabling a subsequent Buffer#write to alias the freed page and potentially disclose or corrupt cross-buffer data. Root cause: stale rmem_last/rm...