365954 matches found
RHEL 9 : freerdp (RHSA-2026:72481)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72481 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...
Oracle Linux 8 : perl-DBI (ELSA-2026-71608)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71608 advisory. 1.641-3 - Force placeholder limit on :N and :pN placeholders CVE-2026-73194 Resolves: RHEL-247320 Tenable has extracted the preceding description block directl...
Fedora 43 : perl-Catalyst-Plugin-Static-Simple (2026-7c46481544)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7c46481544 advisory. Catalyst::Plugin::Static::Simple for Perl sets the CacheControl header to public for every static asset served. Consequently, intermediaries such as shared...
Debian dsa-6527 : rsync - security update
The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6527 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6527-1 [email protected] https://www.debian.org/securit...
Mozilla Firefox < 157.0
The version of Firefox installed on the remote Windows host is prior to 157.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-97 advisory. - Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157...
Amazon Linux 2 : freerdp (ALAS-2026-3938)
The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3938 advisory. A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive...
Amazon Linux 2 : python3-tornado (ALAS-2026-3924)
The version of python3-tornado installed on the remote host is prior to 5.0.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3924 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses...
Fedora 43 : NetworkManager-iodine (2026-d3a0471c75)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d3a0471c75 advisory. Fix CVE-2026-91837 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Amazon Linux 2 : libxml2 (ALAS-2026-3940)
The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3940 advisory. A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing ...
Amazon Linux 2 : runc (ALASECS-2026-138)
The version of runc installed on the remote host is prior to 1.3.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-138 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final...
Amazon Linux 2 : flatpak (ALAS-2026-3959)
The version of flatpak installed on the remote host is prior to 1.0.9-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3959 advisory. In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be...
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Requests vulnerability (USN-8825-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8825-1 advisory. It was discovered that Requests did not correctly handle generating random temporary file paths. An attacker could possibly us...
RHEL 9 : kpatch-patch-5_14_0-687_10_1 (RHSA-2026:72832)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72832 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
RockyLinux 9 : resteasy (RLSA-2026:72424)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:72424 advisory. resteasy-core: RESTeasy SourceProvider remote unauthenticated file read CVE-2026-17615 Tenable has extracted the preceding description block directly from the...
Fedora 44 : perl-Catalyst-Plugin-Static-Simple (2026-2d96cf2594)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2d96cf2594 advisory. Catalyst::Plugin::Static::Simple for Perl sets the CacheControl header to public for every static asset served. Consequently, intermediaries such as shared...
Ubuntu 24.04 LTS : libvirt vulnerabilities (USN-8831-1)
The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8831-1 advisory. It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue ...
GitLab 19.0 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-8937)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an...
Linux Distros Unpatched Vulnerability : CVE-2026-86334
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows...
Amazon Linux 2023 : flatpak, flatpak-devel, flatpak-libs (ALAS2023-2026-3143)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3143 advisory. A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged...
Fedora 43 : chromium (2026-8729b61cd3)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8729b61cd3 advisory. Update to 154.0.8037.57 CVE-2026-95274: Improper output encoding in DevTools CVE-2026-95275: Incorrect reference resolution in MediaStream...
Amazon Linux 2 : gvfs (ALAS-2026-3943)
The version of gvfs installed on the remote host is prior to 1.36.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3943 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply t...
Debian dla-4800 : glance - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4800 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4800-1 [email protected]...
Debian dla-4799 : python-lxml-doc - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4799 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4799-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-85644
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a...
Ubuntu 18.04 LTS / 24.04 LTS : dracut vulnerabilities (USN-8828-1)
The remote Ubuntu 18.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8828-1 advisory. It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could...
Linux Distros Unpatched Vulnerability : CVE-2026-87798
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 o...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : pdfminer vulnerabilities (USN-8837-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8837-1 advisory. It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use thes...
Fedora 45 : perl-Catalyst-Plugin-Static-Simple (2026-4d5a716383)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4d5a716383 advisory. Catalyst::Plugin::Static::Simple for Perl sets the CacheControl header to public for every static asset served. Consequently, intermediaries such as shared...
Mozilla Firefox ESR < 115.42
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.42. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-98 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was...
Amazon Linux 2 : thunderbird (ALAS-2026-3960)
The version of thunderbird installed on the remote host is prior to 140.16.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3960 advisory. Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside th...
RHEL 8 : git-lfs (RHSA-2026:72737)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72737 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...
Linux Distros Unpatched Vulnerability : CVE-2026-97024
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host syste...
Linux Distros Unpatched Vulnerability : CVE-2026-94286
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. CVE-2026-94286...
Debian dla-4798 : libdbi-perl - security update
The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4798 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4798-1 [email protected]...
Oracle Linux 9 : resteasy (ELSA-2026-72424)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72424 advisory. 3.0.26-20 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 Tenable has extracted the preceding description block...
SUSE SLES15 Security Update : hplip (SUSE-SU-2026:4364-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4364-1 advisory. - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of...
Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2026-3128)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3128 advisory. When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on...
Linux Distros Unpatched Vulnerability : CVE-2026-87799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an...
Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2026-3930)
The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3930 advisory. A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while...
CentOS 9 : unbound-1.26.1-1.el9
"The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the unbound-1.26.1-1.el9 build changelog. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under...
Amazon Linux 2023 : python3-bson, python3-pymongo, python3-pymongo-gridfs (ALAS2023-2026-3121)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3121 advisory. Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query...
Linux Distros Unpatched Vulnerability : CVE-2026-102010
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the library reallocates storage but fails ...
RockyLinux 8 : expat (RLSA-2026:72448)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:72448 advisory. expat: Expat: Denial of Service via quadratic complexity in attribute processing CVE-2026-66046 expat: Expat: XML Injection via Malformed UTF-16 Input...
Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2026-3131)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3131 advisory. Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by...
Linux Distros Unpatched Vulnerability : CVE-2026-100889
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkimqpdecode of the file util.c of the component Decoder...
Fedora 45 : freerdp (2026-ff8f6f4444)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ff8f6f4444 advisory. Update to 3.32.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2026-3096)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3096 advisory. A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and...
Ubuntu 24.04 LTS / 26.04 LTS : FreeRDP vulnerabilities (USN-8836-1)
The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8836-1 advisory. It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause...
Linux Distros Unpatched Vulnerability : CVE-2026-100890
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library...
RHEL 10 : thunderbird (RHSA-2026:73130)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:73130 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM:...