Microsoft SharePoint - Remote Code Execution

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. id: CVE-2020-16952 info: name: Microsoft SharePoint - Remote Code Execution author: dwisiswant0 severity: high description: Microsoft SharePoint is vulnerabl...

Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...

Microsoft SQL Server Reporting Services - Remote Code Execution

Microsoft SQL Server Reporting Services is vulnerable to a remote code execution vulnerability because it incorrectly handles page requests. id: CVE-2020-0618 info: name: Microsoft SQL Server Reporting Services - Remote Code Execution author: joeldeleep severity: high description: Microsoft SQL...

Oracle Linux 10 : grafana-pcp (ELSA-2026-88316)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-88316 advisory. 5.3.0-8.2 - Rebuilt against updated golang - Resolves RHEL-287474, RHEL-279348, RHEL-278699 Tenable has extracted the preceding description block...

Oracle Linux 10 : podman (ELSA-2026-88336)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88336 advisory. - Rebuild for CVE-2026-111943 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 8 : grafana (ELSA-2026-88188)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88188 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 Tenable has extracted the preceding description block directly...

Fedora 44 : perl-ExtUtils-Typemaps-Default (2026-9989a9a8f5)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9989a9a8f5 advisory. - Update to 1.07 - Security fix for CVE-2026-107373 - Security fix for CVE-2026-107794 Tenable has extracted the preceding description block directl...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142332 advisory. Unity Link Advisory UTSA-2026-142332 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Oracle Linux 10 : lrzsz (ELSA-2026-86056)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-86056 advisory. - Backport tightened path handling from 0.13.1 CVE-2026-105840 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : cockpit-machines (ELSA-2026-86971)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-86971 advisory. - CVE-2026-92768 RHEL-263124 - CVE-2026-92747 RHEL-263120 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

AlmaLinux 9.2 [TuxCare] Security Update: squid Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792517219)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792517219 advisory. - Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid...

Fedora 44 : python3.15 (2026-1419522981)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1419522981 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CLSA-2023-1701963303 kernel: Fix of 19 CVEs

net/tls: do not free tlsrec on async operation in bpfexectxverdict CVE-2023-6176 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - x86/sev: Check for user-space IOIO pointing to kernel space CVE-2023-46813 -...

Fedora 44 : kernel (2026-1a3e2d0ffe)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1a3e2d0ffe advisory. The 7.2.11 stable kernel updates contain a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Fedora 43 : kernel (2026-3057544965)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3057544965 advisory. The 7.2.11 stable kernel updates contain a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Astra Linux – Vulnerability in WebKit2GTK

“Clear History and Website Data” did not successfully clear the browsing history. The issue was resolved through improved data deletion mechanisms. This issue has been fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3, and iPadOS 14.3, as we...

K000163695: Overview of F5 Critical Releases

F5 Critical Releases are software updates delivered on a regular, predictable cadence that focus exclusively on security and bug fixes. Name change from Hardened Releases : F5 previously referred to these software updates as "Hardened Releases." We updated the name to Critical Releases to better...

Photon OS 5.0: Lz4 PHSA-2025-5.0-0677

An update of the lz4 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0677. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid36591...

Oracle Linux 8 : hplip (ELSA-2026-82295)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82295 advisory. 3.26.6-3 - Fix LEDM scanning 3.26.6-2 - fix OSH issues 3.26.6-1 - Rebase to 3.26.6 Tenable has extracted the preceding description block directly from...

Microsoft Patch Tuesday, October 2026 Security Update Review

Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat landscape, applying security patches promptly remains critical to reducing exposure and strengthening...