143692 matches found
Fedora 43 : nmap (2026-602d919dbc)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-602d919dbc advisory. - Fix CVE-2026-58058 rhbz2494410 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
RockyLinux 9 : gstreamer1-plugins-good (RLSA-2026:37129)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:37129 advisory. gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow CVE-2026-53705 Tenable has extracted the preceding description...
EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-2526)
According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer dereference with...
EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-2620)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename when...
MiracleLinux 8 : libxml2-2.9.7-21.el8_10.6 (AXSA:2026-1234:04)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1234:04 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly fro...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : LibRaw vulnerabilities (USN-8522-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8522-1 advisory. It was discovered that LibRaw incorrectly handled certain Nikon RAW image files. An attacker could possibly use this issue to cau...
EulerOS 2.0 SP12 : systemd (EulerOS-SA-2026-2632)
According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the...
MiracleLinux 9 : nginx-1.20.1-28.el9_8.2.ML.1 (AXSA:2026-1233:04)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1233:04 advisory. nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 Tenable has extracted the preceding description block directly from the MiracleLinux...
GHSA-G586-CCQF-7X4R
creationtimestamp| type| source ---|---|--- 2026-07-09 23:42:44+00:00| seen| https://gist.github.com/alon710/be308f55a57246cb8ce657d04b30b2e9 2026-07-10 00:00:25+00:00| seen| https://gist.github.com/alon710/be308f55a57246cb8ce657d04b30b2e9...
CVE-2026-53769
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:32+00:00| published-proof-of-concept| https://github.com/avo-hq/avo/security/advisories/GHSA-pqpw-cvm4-8mv9...
CVE-2026-52762
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:30+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-65p8-9433-jpcp...
CVE-2026-52763
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:28+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-89v6-j5x6-cmj3...
CVE-2026-52767
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:23+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g 2026-09-05 04:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqlr5bgtt2k...
CVE-2026-52769
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:21+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-vw42-752g-5mrp 2026-09-05 06:02:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqskl3epj2m...
CVE-2026-52771
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:16+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-8f2v-2qhj-gfwg 2026-09-05 06:02:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqsldu7st22...
CVE-2026-52774
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:10+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r5xw-gcgw-hwp5 2026-07-13 06:00:05+00:00| confirmed|...
CVE-2026-52775
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:07+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-4pf7-cc4r-g63h 2026-09-05 04:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqlqpyeco2p...
Weak Password Recovery Mechanism for Forgotten Password
Overview Affected versions of this package are vulnerable to Weak Password Recovery Mechanism for Forgotten Password via the resetPasswordUrl parameter in the password reset process. An attacker can gain unauthorized access to any administrator account and bypass two-factor authentication by...