Oracle Linux 10 : giflib (ELSA-2026-19154)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19154 advisory. - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension RHEL-157086 Tenable has extracted the preceding description block directly from the Oracle Linux...

Fedora 43 : yq (2026-990cdd8329)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-990cdd8329 advisory. Update to 4.53.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : libtiff (2026-cfbf964c2e)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cfbf964c2e advisory. updated to 4.7.2, fixes security issues Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 44 : ruby (2026-32d5a3d450)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-32d5a3d450 advisory. Ruby 4.0.6 is released. This new ruby contains several security fixes in net-snmp. Tenable has extracted the preceding description block directly fr...

Fedora 43 : ruby (2026-7b7c2b373e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7b7c2b373e advisory. Ruby 3.4.10 is released. This new version contains severay security bug fixes in zlib, net-imap and erb.. Tenable has extracted the preceding...

Oracle Linux 9 : pacemaker (ELSA-2026-39323)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39323 advisory. - Fix integer overflows in remote message decompression code CVE-2026-10649 Tenable has extracted the preceding description block directly from the Oracle Linu...

CVE-2026-54567

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:08+00:00| published-proof-of-concept| https://github.com/jugmac00/flask-reuploaded/security/advisories/GHSA-937x-gpqr-72gg...

CVE-2026-54570

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:05+00:00| published-proof-of-concept| https://github.com/AngleSharp/AngleSharp/security/advisories/GHSA-pgww-w46g-26qg...

CVE-2026-55177

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:03+00:00| published-proof-of-concept| https://github.com/dfpc-coe/CloudTAK/security/advisories/GHSA-r95q-fp26-h3hc...

UBUNTU-CVE-2026-53727

cssparser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Parserreadremotefile in lib/cssparser/parser.rb, and therefore loaduri! and the @import-following branch of addblock!, issued HTTP and HTTPS requests against any host, port, and URI without a scheme allowlist, host or IP filtering...

CVE-2026-54490 websocket-driver: Resource limit bypass via message compression

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

CVE-2026-54549

creationtimestamp| type| source ---|---|--- 2026-07-17 20:35:08+00:00| published-proof-of-concept| https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-45gf-fjxp-cjpq...

CVE-2026-54546

creationtimestamp| type| source ---|---|--- 2026-07-17 20:35:03+00:00| published-proof-of-concept| https://github.com/dfpc-coe/CloudTAK/security/advisories/GHSA-vqrw-qphh-p34v...

GHSA-5G35-5JRJ-F39P vulnerabilities

Vulnerabilities for packages: perl...

GHSA-XXVR-RJCX-VQW8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5CVC-PM9V-PW7P vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QPX7-R6J6-CQF3 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15776 vulnerabilities

Vulnerabilities for packages: chromium...

UBUNTU-CVE-2026-54171

Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial...

CVE-2026-54464 websocket-driver: Resource limit bypass via message compression

Impact If this library is used in tandem with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size. This is because this limit is checked against the message frames' length headers, which give the si...