365954 matches found
SolarWinds Observability Self-Hosted < 2026.2.3 Multiple Vulnerabilities
The version of SolarWinds Observability Self-Hosted installed on the remote host is prior to 2026.2.3. It is, therefore, affected by multiple vulnerabilities: - An insufficient verification of data authenticity vulnerability that could allow an unauthenticated, remote attacker to execute arbitrar...
Linux Distros Unpatched Vulnerability : CVE-2026-97598
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: fib: bound automatic table ID allocation fibemptytable probes every table ID from 1 until it finds a free one. IPv4 tables are stored in a 256-bucket hash...
Linux Distros Unpatched Vulnerability : CVE-2026-96745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored...
Linux Distros Unpatched Vulnerability : CVE-2026-97979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ice: add missing xadestroy for schednodeids Commit 16dfa49406bc ice: Introduce new parameters in iceschednode added a schednodeids xarray to the port info...
Linux Distros Unpatched Vulnerability : CVE-2026-97927
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ufs: create the root dentry after loading cylinder metadata ufsfillsuper installed sb-sroot before it loaded the cylinder group structures for a writable mount...
Linux Distros Unpatched Vulnerability : CVE-2026-97948
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver The commit 1010b4c012b0 powerpc/eeh: Make EEH driver device hotplug safe refactored t...
Linux Distros Unpatched Vulnerability : CVE-2026-67225
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the stream protocol stored the FrameMax value negotiated...
Linux Distros Unpatched Vulnerability : CVE-2026-96747
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in .sock as a local Unix domain...
Linux Distros Unpatched Vulnerability : CVE-2026-73064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS...
Linux Distros Unpatched Vulnerability : CVE-2026-98005
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separat...
Linux Distros Unpatched Vulnerability : CVE-2026-98133
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occu...
openSUSE 16 Security Update : corosync (openSUSE-SU-2026:21887-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21887-1 advisory. - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666: integ...
openSUSE 16 Security Update : gnome-remote-desktop (openSUSE-SU-2026:21888-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21888-1 advisory. This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow...
Linux Distros Unpatched Vulnerability : CVE-2026-97956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: netfailover: Fix the deadlock in netfailoverslavenamechange This is a sibling fix of commit b84c5632c7b3 net: netfailover: Fix the deadlock in slave...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerabilities (USN-8798-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8798-1 advisory. It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote...
Linux Distros Unpatched Vulnerability : CVE-2026-98061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and...
Linux Distros Unpatched Vulnerability : CVE-2026-98161
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error...
Linux Distros Unpatched Vulnerability : CVE-2026-93244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sysfb: simpledrm: Improve stride validation Validate the computed stride against the maximum value INTMAX. CVE-2026-93244 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-97592
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Ghostscript vulnerability (USN-8791-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8791-1 advisory. It was discovered that Ghostscript incorrectly handled JPEG 2000 image components with mismatched subsampling factors. An attacker could...
Linux Distros Unpatched Vulnerability : CVE-2026-97905
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: zero-initialize policy cpumask before sysfs publication cpufreqpolicyalloc allocates policy-cpus with alloccpumaskvar, i.e. without GFPZERO, unlike the...
Linux Distros Unpatched Vulnerability : CVE-2026-97940
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked...
Linux Distros Unpatched Vulnerability : CVE-2026-97998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfnetlinklog: cope with concurrent instance destruction Instances are refcounted. However, only memory release happens on the 1 - 0 transition; the...
Linux Distros Unpatched Vulnerability : CVE-2026-98011
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: hhf: clamp quantum in change and init paths hhfchange accepts any quantum from userspace, including 1. With a crafted size table qdiscpktlen reaches ...
Linux Distros Unpatched Vulnerability : CVE-2026-93223
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error...
Linux Distros Unpatched Vulnerability : CVE-2026-97975
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisysfs: Fix NULL pointer dereference in devicedel A NULL pointer dereference in klistput occurs when a child device such as a BNEP network device i...
Linux Distros Unpatched Vulnerability : CVE-2026-97602
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment whi...
Linux Distros Unpatched Vulnerability : CVE-2026-98050
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mlxsw: spectrumptp: Fix napigroreceive call from GC workqueue context Currently mlxswsp1ptphtgccollect is run from the PTP garbage-collection workqueue, rather...
Linux Distros Unpatched Vulnerability : CVE-2026-97617
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Check resizedisabled before publishing the new subbuf order ringbuffersubbuforderset stores the new order and only then walks the CPUs, returning...
Linux Distros Unpatched Vulnerability : CVE-2026-88378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag. CVE-2026-88378 Note that Nessus relies on the presence of the packa...
openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21921-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21921-1 advisory. Changes in chromium: - Chromium 153.0.8010.52 boo1281123: CVE-2026-93374: Use after free in Dawn CVE-2026-93372: Buffer overflow in WebGL...
Linux Distros Unpatched Vulnerability : CVE-2026-93239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: mm: Fix the lockless page-table walk in showpte showpte walks page tables locklessly and can run with interrupts enabled. A concurrent teardown can free ...
openSUSE 16 Security Update : python-weasyprint (openSUSE-SU-2026:21928-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21928-1 advisory. Changes in python-weasyprint: - CVE-2026-55073: Server-Side Request Forgery SSRF bsc1279942 Tenable has extracted the preceding description block direct...
Linux Distros Unpatched Vulnerability : CVE-2026-98109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicore: Fix race condition during device registration In hciregisterdev, the poweron work item is queued to hdev-reqworkqueue before initializing...
Linux Distros Unpatched Vulnerability : CVE-2026-93208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belongi...
Linux Distros Unpatched Vulnerability : CVE-2026-97584
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix incorrect free in candidate cleanup in afslookupserver Fix afslookupserver to not free an existing server's endpoint state when cleaning up a candidate...
ManageEngine ADSelfService Plus < Build 7001 RCE (CVE-2026-74849)
According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 7001. It is, therefore, affected by a remote code execution vulnerability: - Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a...
Linux Distros Unpatched Vulnerability : CVE-2026-93229
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: add missing read barrier to rpcstatusget dumpit seqcount retry The hand-rolled seqcount-like protocol in nfsdnlrpcstatusgetdumpit is missing a read memor...
Linux Distros Unpatched Vulnerability : CVE-2026-67419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can use consecuti...
Linux Distros Unpatched Vulnerability : CVE-2026-57175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer...
Linux Distros Unpatched Vulnerability : CVE-2026-97556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: avoid leaking refcount when cifssbtlink fails cifsoplockbreak takes over the reference that cifsqueueoplockbreak acquired when it queued the work,...
openSUSE 16: cups / cups-client / cups-config / cups-ddk / cups-devel / libcups2 / etc (openSUSE-SU-2026:21893-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21893-1 advisory. This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be...
Linux Distros Unpatched Vulnerability : CVE-2026-97965
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it usin...
Linux Distros Unpatched Vulnerability : CVE-2026-88362
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively...
Debian dla-4795 : libcrypto3-udeb - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4795 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4795-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-97540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: pegasus: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usbdeviceid parameter of prob...
Linux Distros Unpatched Vulnerability : CVE-2026-97952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunvdc: unmap LDC cookies when the descriptor send fails sendrequest maps the request's pages into the LDC channel's map table ldcmapsg, fills in the descriptor...
Linux Distros Unpatched Vulnerability : CVE-2026-98117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct...
Linux Distros Unpatched Vulnerability : CVE-2026-98134
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug...
Linux Distros Unpatched Vulnerability : CVE-2026-98069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/rds: acquire the fastpath locks in rdsconnshutdown rdsconnshutdown quiesces the transmit and receive-refill paths by waiting for RDSINXMIT and RDSRECVREFILL...