Microsoft SharePoint - Remote Code Execution

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. id: CVE-2020-16952 info: name: Microsoft SharePoint - Remote Code Execution author: dwisiswant0 severity: high description: Microsoft SharePoint is vulnerabl...

AlmaLinux 9.2 [TuxCare] Security Update: squid Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792517219)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792517219 advisory. - Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid...

Fedora 44 : python3.15 (2026-1419522981)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1419522981 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 44 : kernel (2026-1a3e2d0ffe)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1a3e2d0ffe advisory. The 7.2.11 stable kernel updates contain a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Fedora 43 : kernel (2026-3057544965)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3057544965 advisory. The 7.2.11 stable kernel updates contain a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Astra Linux – Vulnerability in WebKit2GTK

“Clear History and Website Data” did not successfully clear the browsing history. The issue was resolved through improved data deletion mechanisms. This issue has been fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3, and iPadOS 14.3, as we...

Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...

K000163695: Overview of F5 Critical Releases

F5 Critical Releases are software updates delivered on a regular, predictable cadence that focus exclusively on security and bug fixes. Name change from Hardened Releases : F5 previously referred to these software updates as "Hardened Releases." We updated the name to Critical Releases to better...

Photon OS 5.0: Lz4 PHSA-2025-5.0-0677

An update of the lz4 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0677. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid36591...

Oracle Linux 8 : hplip (ELSA-2026-82295)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82295 advisory. 3.26.6-3 - Fix LEDM scanning 3.26.6-2 - fix OSH issues 3.26.6-1 - Rebase to 3.26.6 Tenable has extracted the preceding description block directly from...

Microsoft Patch Tuesday, October 2026 Security Update Review

Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat landscape, applying security patches promptly remains critical to reducing exposure and strengthening...

Fedora 43 : python3.13 (2026-1928c5d40b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1928c5d40b advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 43 : python3.11 (2026-37c784fc16)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-37c784fc16 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 44 : python3.11 (2026-f105922543)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f105922543 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 44 : python3.13 (2026-67c5f750b3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-67c5f750b3 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Rocky Linux 8.6 [CIQ] Security Update: texlive / texlive-adjustbox / texlive-ae / texlive-algorithms / etc (ciqsa-2026_1610)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261610 advisory. This advisory aggregates security fixes for the texlive SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2018-17407. Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ciqsa-2026_1635)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261635 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2024-12797. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: WALinuxAgent / WALinuxAgent-cvm / WALinuxAgent-udev (ciqsa-2026_1619)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261619 advisory. This advisory aggregates security fixes for the WALinuxAgent SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2019-0804. Tenable has extracted the preceding descripti...

python313-Jinja2-3.1.6-2.4 on GA media (moderate)

python313-Jinja2-3.1.6-2.4 on GA media Announcement ID: openSUSE-SU-2026:11992-1 Rating: moderate Cross-References: CVE-2014-0012 CVE-2016-10745 CVE-2019-10906 CVE-2020-28493 CVE-2024-22195 CVE-2024-34064 CVSS scores: CVE-2016-10745 SUSE : 8.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L...

Fedora 44 : openvpn (2026-eed9c789d3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eed9c789d3 advisory. Update to upstream 2.7.8 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...