391877 matches found
EulerOS 2.0 SP12 : python-filelock (EulerOS-SA-2026-4443)
"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...
AlmaLinux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794007406)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794007406 advisory. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150631)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150631 advisory. Unity Link Advisory UTSA-2026-150631 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...
Linux Distros Unpatched Vulnerability : CVE-2026-49272
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150625)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150625 advisory. Unity Link Advisory UTSA-2026-150625 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...
EulerOS 2.0 SP12 : openssl (EulerOS-SA-2026-4508)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the reco...
Linux Distros Unpatched Vulnerability : CVE-2026-73473
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer gst-plugins-good avidemux. In the subindex parser, missing validation of the entry count can cause excessive memory allocation and...
EulerOS 2.0 SP12 : ruby (EulerOS-SA-2026-4453)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : REJECTED Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security...
EulerOS 2.0 SP12 : python3 (EulerOS-SA-2026-4450)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Oracle Solaris Third Party Bulletin announces patches for one or more security vulnerabilities addressed in third party software that is...
RHEL 9 : Satellite 6.17 (RHSA-2026:95656)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95656 advisory. This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities described...
EulerOS 2.0 SP12 : util-linux (EulerOS-SA-2026-4461)
According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount....
SUSE SLES12 Security Update : kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:5052-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5052-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: -...
SUSE SLES12 Security Update : kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:5086-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5086-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: -...
EulerOS 2.0 SP12 : perl-URI (EulerOS-SA-2026-4439)
According to the versions of the perl-URI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep...
RHEL 9 : webkit2gtk3 (RHSA-2026:95516)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95516 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...
RHEL 9 : qt5-qtbase (RHSA-2026:95574)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95574 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...
OpenSSH < 10.6p2 Authentication Bypass
The version of OpenSSH installed on the remote host is prior to 10.6p2. It is, therefore, affected by an authentication bypass vulnerability as referenced in the release-10.6p2 advisory. - sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a passwor...
Fedora 45 : tailscale (2026-068cc0ad52)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-068cc0ad52 advisory. update to 1.102.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
RockyLinux 9 : delve (RLSA-2026:95518)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95518 advisory. crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 crypto/x509: golang: crypto/x509:...
Fedora 43 : scribus (2026-f7bd6aa596)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f7bd6aa596 advisory. 1.6.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...
Linux Distros Unpatched Vulnerability : CVE-2026-85068
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.4.2 through...
RHEL 8 : xorg-x11-server-Xwayland (RHSA-2026:95281)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:95281 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server: arbitrary code execution via...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150629)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150629 advisory. Unity Link Advisory UTSA-2026-150629 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...
EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-4524)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even...
Squid 5.x < 7.7 Stack-based Buffer Overflow (SQUID-2026:7)
The version of Squid on the remote host is 5.x, 6.x or 7.x prior to 7.7. It is, therefore, affected by a stack-based buffer overflow vulnerability: - Due to an Improper Input Validation bug, Squid is vulnerable to a stack-based buffer overflow attack against HTTP authentication. This problem allo...
Cisco UCS Central Software RCE (cisco-sa-cucs-rce-LzHSFRDQ)
According to its self-reported version, Cisco Unified Computing System Central Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct...
Linux Distros Unpatched Vulnerability : CVE-2026-123158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass related to misinterpretation...
EulerOS 2.0 SP12 : mariadb-connector-c (EulerOS-SA-2026-4425)
According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validat...
AlmaLinux 9.6 [TuxCare] Security Update: libXi / libXi-devel (ALMALINUX9.6:CLSA-2026:1793984702)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793984702 advisory. - A malicious X server could cause a heap overflow by injecting a large DEVICEENABLE reply when processed by libXi before 1.8.4...
RHEL 9 : osbuild-composer (RHSA-2026:95272)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95272 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for...
EulerOS 2.0 SP12 : wget (EulerOS-SA-2026-4540)
According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP...
EulerOS 2.0 SP12 : sg3_utils (EulerOS-SA-2026-4455)
According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...
EulerOS 2.0 SP12 : rpm (EulerOS-SA-2026-4451)
According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.c...
Linux Distros Unpatched Vulnerability : CVE-2026-123876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AFVSOCK and NETLINKAUDIT compared socket arguments with...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150622)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150622 advisory. Unity Link Advisory UTSA-2026-150622 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...
EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-4408)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a...
EulerOS 2.0 SP12 : libXfont2 (EulerOS-SA-2026-4489)
According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the...
EulerOS 2.0 SP12 : tar (EulerOS-SA-2026-4459)
According to the versions of the tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with...
RHEL 8 : bind (RHSA-2026:95478)
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95478 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : ca-certificates update (USN-9001-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-9001-1 advisory. It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the...
EulerOS 2.0 SP12 : dracut (EulerOS-SA-2026-4400)
According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory...
Linux Distros Unpatched Vulnerability : CVE-2026-116641
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DB Tools rely on the TLS implementation in Golang's standard library, which generally uses the system CA store. However, the crypto/x509 package also has it...
Elastic Beats packetbeat 8.0.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 DoS (ESA-2026-208)
The version of Elastic Beats packetbeat installed on the remote host is 8.0.x prior to 8.19.24, 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a denial of service vulnerability. - NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to ...
Python Library Django 5.2.13 < 5.2.19 / 6.0.4 < 6.0.10 / 6.1.x < 6.1.3 DoS
The detected version of the Django Python package is 5.2.x at or above 5.2.13 and prior to 5.2.19, or 6.0.x at or above 6.0.4 and prior to 6.0.10, or 6.1.x prior to 6.1.3. It is, therefore, affected by a denial of service vulnerability as referenced by the security release advisory: -...
RHEL 8 : webkit2gtk3 (RHSA-2026:95590)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95590 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...
EulerOS 2.0 SP12 : gdk-pixbuf2 (EulerOS-SA-2026-4481)
According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profi...
RockyLinux 8 : gimp:2.8 (RLSA-2026:95482)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:95482 advisory. gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader loadresource1033 CVE-2026-112257 Bug Fixes and Enhancements: gimp: xpm poc file for CVE-2026-41...
AlmaLinux 10 : delve (ALSA-2026:95519)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:95519 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple...
RHEL 10 : dogtag-pki (RHSA-2026:95466)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95466 advisory. IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the...
RockyLinux 9 : kernel (RLSA-2026:95370)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95370 advisory. kernel: net/smc: fix UAF in smccdcrxhandler by pinning the socket CVE-2026-64541 kernel: sctp: avoid authenable sysctl UAF during netns teardown...