391878 matches found
Fedora 44 : podofo (2026-000ff43d05)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-000ff43d05 advisory. Backport fix for CVE-2026-54633. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CentOS Linux 6 [TuxCare] Security Update: libevent / libevent-devel / libevent-doc / libevent-headers Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792747726)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792747726 advisory. - The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involvi...
CentOS Linux 7 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792688174)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792688174 advisory. - Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser stores non-file...
Fedora 43 : nix (2026-065497e462)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-065497e462 advisory. Update to 2.31.6 which addresses: CVE-2026-110450 High, https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56 and other Moderate issues: see...
RHEL 9 : jackson-databind (RHSA-2026:89924)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89924 advisory. The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator...
CentOS Linux 7 [TuxCare] Security Update: rpm / rpm-apidocs / rpm-build / rpm-build-libs / rpm-cron / etc (CENTOS7:CLSA-2026:1792771843)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792771843 advisory. - A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed b...
Linux Distros Unpatched Vulnerability : CVE-2026-96432
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE...
Fedora 44 : libindi (2026-f614e26c1d)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f614e26c1d advisory. Update to 2.2.5 and fix CVE-2026-71979. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...
Fedora 44 : mingw-libpng (2026-2ff2251161)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2ff2251161 advisory. Update to libpng-1.6.59, fixes CVE-2026-46675. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good (CENTOS7:CLSA-2026:1792770102)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792770102 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps functi...
Linux Distros Unpatched Vulnerability : CVE-2026-116260
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function servicereceive of the file src/afc.c of the component AFC Servic...
Linux Distros Unpatched Vulnerability : CVE-2026-98896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by...
RHEL 9 : Red Hat OpenStack Platform 17.1 security advisory (Important) (RHSA-2026:90329)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90329 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...
RHEL 9 : xz (RHSA-2026:89749)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:89749 advisory. XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv- Markov chain algorithm LZMA, which performs...
Linux Distros Unpatched Vulnerability : CVE-2026-116143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limi...
Oracle Linux 9 : bind (ELSA-2026-89745)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89745 advisory. - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-196...
CentOS Linux 6 [TuxCare] Security Update: ncurses / ncurses-base / ncurses-devel / ncurses-libs / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792807491)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792807491 advisory. - An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow. CVE-2021-39537 - ncurs...
Linux Distros Unpatched Vulnerability : CVE-2026-115822
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked reque...
Linux Distros Unpatched Vulnerability : CVE-2026-116151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-116140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. ...
Debian dla-4858 : imagemagick - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4858 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4858-1 [email protected]...
RHEL 9 : rhc (RHSA-2026:89914)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89914 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...
Oracle Linux 7 : post (ELSA-2026-57174)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57174 advisory. - Fix CVE-2026-43964 buffer over-read Orabug: 39905988 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
MiracleLinux 8 : dotnet9.0-9.0.122-1.el8_10 (AXSA:2026-2155:21)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2155:21 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET...
F5 Networks BIG-IP : PHP vulnerabilities (K000163821)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.7 / 17.5.1.11 / 21.1.0.4 / Hotfix- BIGIP-17.1.3.6.0.9.20-ENG / Hotfix-BIGIP-17.5.1.10.0.37.35-ENG. It is, therefore, affected by multiple vulnerabilities as referenced in the K000163821 advisory. CVE-2026-109618also...
Linux Distros Unpatched Vulnerability : CVE-2026-116147
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not...
Linux Distros Unpatched Vulnerability : CVE-2026-116160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attacker...
RHEL 9 : rhc (RHSA-2026:89740)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89740 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...
Linux Distros Unpatched Vulnerability : CVE-2026-116124
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file...
RHEL 10 : grafana (RHSA-2026:89751)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89751 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/http:...
RHEL 8 : flatpak (RHSA-2026:89859)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89859 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: flatpak:...
Oracle Linux 10 : skopeo (ELSA-2026-89761)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89761 advisory. - Rebuild for CVE-2026-111943 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...
macOS 27.x < 27.2 Multiple Vulnerabilities (149521)
The remote host is running a version of macOS / Mac OS X that is 27.x prior to 27.2. It is, therefore, affected by multiple vulnerabilities: - A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4...
Linux Distros Unpatched Vulnerability : CVE-2026-116146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release allocated memory when processing a crafted...
MiracleLinux 8 : kernel-4.18.0-553.177.1.el8_10 (AXSA:2026-2153:107)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2153:107 advisory. kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 kernel: ipv4: validate checksumstart...
macOS 15.x < 15.8.2 Multiple Vulnerabilities (149523)
The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.8.2. It is, therefore, affected by multiple vulnerabilities: - A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. ...
Linux Distros Unpatched Vulnerability : CVE-2026-116190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards operator-configured custom credential...
Linux Distros Unpatched Vulnerability : CVE-2026-115825
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with...
Fedora 44 : mingw-python-lxml (2026-99cd0bee1c)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-99cd0bee1c advisory. Update to python-lxml-6.1.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...
RHEL 10 : httpd (RHSA-2026:89860)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89860 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: httpd: HTTP...
AlmaLinux 10 : firefox (ALSA-2026:76764)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:76764 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free ...
Linux Distros Unpatched Vulnerability : CVE-2026-116159
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl color decision list option, where allocated memory is no...
Linux Distros Unpatched Vulnerability : CVE-2026-116150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image...
Debian dla-4860 : libdatetime-timezone-perl - security update
The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4860 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4860-1 [email protected] https://www.debian.org/lts/security/...
Linux Distros Unpatched Vulnerability : CVE-2026-99089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: samsung: i2s: enable opclk in probe to balance runtime PM The probe function puts the device into the runtime PM active state with only the iis bus clock...
Amazon Corretto Java 17.x < 17.0.21.0.11 Vulnerability
The version of Amazon Corretto installed on the remote host is 17 prior to 17.0.21.0.11. It is, therefore, affected by a vulnerability as referenced in the corretto-17-2026-Oct-24 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...
RHEL 8 : git-lfs (RHSA-2026:89926)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:89926 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing t...
RHEL 9 : bind9.18 (RHSA-2026:89746)
"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:89746 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves...
CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / etc (CENTOS6:CLSA-2026:1792759879)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1792759879 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport reference in qla24xxreportidacquisition In the...
Oracle Linux 9 : libreswan (ELSA-2026-89748)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89748 advisory. 4.15-11.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.15-11 - Backport fixes for CVE-2026-94453, CVE-2026-77206, and CVE-2026-77207...