13659 matches found
Vulnerabilities fixed in Ivanti Endpoint Manager
Ivanti has fixed vulnerabilities in Ivanti Endpoint Manager Specific for versions prior to 2024 SU5. The vulnerability with attribute CVE-2026-1603 concerns an authentication bypass that allows remote, unauthenticated attackers to gain access to certain stored login credentials, which can lead to...
March 10, 2026—KB5078774 (Monthly Rollup)
None None...
March 10, 2026—KB5078740 (OS Build 26100.32522)
None None...
March 10, 2026—Hotpatch KB5078736 (OS Build 26100.32463)
None None...
CVE-2026-23907
A path traversal vulnerability was identified in the ExtractEmbeddedFiles example provided with Apache PDFBox. The example code constructs extraction paths by directly appending filenames obtained from PDComplexFileSpecification.getFilename without validating the resulting path. An attacker could...
KB5079234: Servicing stack update for Windows Server 2012: March 10, 2026
None None...
KLA90922 PE vulnerabilities in Microsoft SQL Server
An elevation of privilege vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2026-21262 CVE-2026-26115 CVE-2026-26116 Exploitation Public exploits exist for this vulnerability. Malware exists for this...
Siemens SICAM SIAPP SDK
SUMMARY The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the simulation environment. These...
Security Updates for Microsoft SharePoint Server 2016 (March 2026)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution vulnerabilities CVE-2026-26106, CVE-2026-26113, CVE-2026-26114 - Spoofing vulnerability in Microsoft SharePoint Server...
Security Updates for Microsoft Excel Products (March 2026)
The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. CVE-2026-26107, CVE-2026-26108, CVE-2026-26109,...
Security Updates for Microsoft Office Products (March 2026)
The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. CVE-2026-26108, CVE-2026-26110 Note that Nessus has not...
Security Updates for Office Online Server (March 2026)
The Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-26107 - Heap-based buffer overflow in...
Security Updates for Microsoft SharePoint Server 2019 (March 2026)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution vulnerabilities CVE-2026-26106, CVE-2026-26113, CVE-2026-26114 - Spoofing vulnerability in Microsoft SharePoint Server...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
NVIDIA GPU Display Driver January 2026 Security Update
NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows, which might allow code execution, escalation of privileges, data tampering, denial of service, and information disclosure. NVIDIA has released updates to mitigate these...
SUSE: Security Advisory (SUSE-SU-2026:0830-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2026:20610-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 44 : firefox / nss (2026-b5bde68630)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b5bde68630 advisory. Update NSS to 3.120.1 Update to Firefox 148.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
SUSE: Security Advisory (SUSE-SU-2026:0800-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2026:0790-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...