270828 matches found
OESA-2026-3273 qemu security update
QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A security vulnerability exists in QEMU, the details of which have not been fully disclosed.CVE-2026-15578 CVE-2026-15705 is an undisclosed vulnerability in QEMU. The vulnerability has be...
OESA-2026-3268 libevent security update
Libevent additionally provides a sophisticated framework for buffered network IO, with support for sockets, filters, rate-limiting, SSL, zero-copy file transmission, and IOCP. Libevent includes support for several useful protocols, including DNS, HTTP, and a minimal RPC framewor. Security Fixes:...
MiracleLinux 9 : openexr-3.1.1-3.el9_8.3 (AXSA:2026-1493:05)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1493:05 advisory. OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing CVE-2026-41142 OpenEXR: OpenEXR: Information disclosure and denial...
AlmaLinux 8 : firefox (ALSA-2026:47105)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:47105 advisory. libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in the...
MiracleLinux 8 : mingw-glib2-2.70.1-9.el8_10 (AXSA:2026-1482:02)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1482:02 advisory. glib: GLib: Buffer underflow in GVariant parser leads to heap corruption CVE-2025-14087 glib: buffer over-read in glib/gvariant-serialiser.c via...
Cisco Catalyst SD-WAN Software Security Hardening (cisco-sa-hardening-sdwan-faLcR3K)
According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco Catalyst SD-WAN Software could allow an authenticated, remote attacker to conduct path traversal attacks, gain unauthorized access, or cause a denial ...
Linux Distros Unpatched Vulnerability : CVE-2026-19147
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perfo...
FreeBSD : Keycloak -- multiple vulnerabilities (e1208b90-91c3-11f1-a0bc-3c7c3fba4204)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e1208b90-91c3-11f1-a0bc-3c7c3fba4204 advisory. The Keycloak Team reports: Tenable has extracted the preceding description block directly from...
RHEL 8 : container-tools:rhel8 (RHSA-2026:51288)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51288 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...
MiracleLinux 9 : podman-5.8.2-4.el9_8 (AXSA:2026-1491:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1491:07 advisory. golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate CVE-2026-39835 golang.org/x/crypto/ssh:...
RHEL 9 : kernel (RHSA-2026:51746)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51746 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: selinux: fix overlayfs mmap a...
PT-2026-76396
Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one...
Slackware Linux 15.0 / current libXfont2 Multiple Vulnerabilities (SSA:2026-218-01)
The version of libXfont2 installed on the remote host is prior to 2.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-218-01 advisory. New libXfont2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
Fedora 43 : libXfont2 (2026-4f471dd34a)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4f471dd34a advisory. libXfont2 2.0.9 CVE-2026-59679, CVE-2026-44950 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
Oracle Linux 9 : kernel (ELSA-2026-51035)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-51035 advisory. - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup Waiman Long RHEL-193526 CVE-2026-52977 - futex: Require sysfutexrequeue to have...
RockyLinux 9 : kernel (RLSA-2026:51035)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:51035 advisory. kernel: futex: Fix UaF between futexkeytonodeopt and vmareplacepolicy CVE-2026-23415 kernel: netfilter: nfnetlinkcthelper: fix OOB read in...
libwireshark19-4.6.7-3.1 on GA media (moderate)
libwireshark19-4.6.7-3.1 on GA media Announcement ID: openSUSE-SU-2026:11460-1 Rating: moderate Cross-References: CVE-2026-15163 CVE-2026-15164 CVE-2026-15165 CVE-2026-15166 CVE-2026-15167 CVE-2026-15168 CVE-2026-15169 CVE-2026-15170 CVE-2026-15171 CVE-2026-15172 CVE-2026-15173 CVE-2026-15174...
libssh2-1-1.11.1-4.1 on GA media (moderate)
libssh2-1-1.11.1-4.1 on GA media Announcement ID: openSUSE-SU-2026:11454-1 Rating: moderate Cross-References: CVE-2026-58050 CVE-2026-58051 CVE-2026-66032 CVE-2026-66033 CVE-2026-66034 CVE-2026-66035 CVSS scores: CVE-2026-58050 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-5805...
UBUNTU-CVE-2026-70631
FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates...
