346835 matches found
EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2026-2708)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
KB5099539: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (July 2026)
The remote Windows host is missing security update 5099539. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...
EulerOS 2.0 SP10 : libcap (EulerOS-SA-2026-2697)
According to the versions of the libcap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use TOCTOU race condition in the capsetfile function...
EulerOS 2.0 SP10 : perl (EulerOS-SA-2026-2707)
According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds...
SUSE SLES15 Security Update : python-Pillow (SUSE-SU-2026:2875-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2875-1 advisory. This update for python-Pillow fixes the following issues - CVE-2026-54059: crafted PCF font data can cause excessive memory allocation...
Adobe Illustrator < 29.8.9 / 30.0 < 30.6 Multiple Vulnerabilities (APSB26-79)
The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.9, 30.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-79 advisory. - Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary co...
Fortinet Fortigate Path traversal in CLI command allows deletion of root file system (FG-IR-26-151)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-151 advisory. - A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiOS 7.6.0...
EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2026-2646)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...
EulerOS 2.0 SP10 : unbound (EulerOS-SA-2026-2717)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash give...
EulerOS 2.0 SP10 : golang (EulerOS-SA-2026-2691)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust...
Security Updates for Microsoft SQL Server (July 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over...
Fedora 43 : golang-github-openprinting-ipp-usb (2026-d7dfd8e9ba)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d7dfd8e9ba advisory. 0.9.34 - security fixes for CVE-2026-27145 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...
Zoom Workplace VDI Client < 6.5.17 Vulnerability (ZSB-26012)
The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.5.17. It is, therefore, affected by a vulnerability as referenced in the ZSB-26012 advisory. - A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom...
Adobe Audition < 25.6.6 / 26.0 < 26.3 Multiple Vulnerabilities (APSB26-71)
The version of Adobe Audition installed on the remote Windows host is prior to 25.6.6, 26.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-71 advisory. - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution...
AlmaLinux 9 : buildah (ALSA-2026:38493)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38493 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...
AlmaLinux 10 : buildah (ALSA-2026:38494)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38494 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...
Oracle Linux 9 : buildah (ELSA-2026-38493)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38493 advisory. - rebuild for CVE-2026-39822 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...
FreeBSD : ocaml-opam -- opam install sandbox escape using symlinks (b478ff13-7f6e-11f1-b594-3c7c3fba4204)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b478ff13-7f6e-11f1-b594-3c7c3fba4204 advisory. The OCaml Team reports: Installing files through .install files do not check symlinks resolution of the...
GitHub Copilot for JetBrains < 1.13.0 RCE (CVE-2026-50510) (July 2026)
The GitHub Copilot for JetBrains plugin installed on the remote host is prior to version 1.13.0. It is, therefore, affected by a remote code execution vulnerability: - A remote code execution vulnerability exists in the GitHub Copilot plugin for JetBrains IDEs. An attacker could exploit this...
Security Update for Microsoft .NET Core SDK (July 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering...
Adobe Experience Manager 6.5.0 < 6.5.2 Multiple Vulnerabilities (APSB26-56)
The version of Adobe Experience Manager installed on the remote host is prior to 6.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-56 advisory. - Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect Ope...
EulerOS 2.0 SP10 : gdk-pixbuf2 (EulerOS-SA-2026-2688)
According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper...
EulerOS 2.0 SP10 : glibc (EulerOS-SA-2026-2649)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and...
Fortinet Fortigate Header injection in Web Filter warning page (FG-IR-26-152)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-152 advisory. - An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' vulnerability CWE-113 vulnerability ...
EulerOS 2.0 SP10 : alsa-lib (EulerOS-SA-2026-2680)
According to the versions of the alsa-lib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer contro...
Adobe After Effects < 25.6.6 / 26.0.0 < 26.3.0 Multiple Arbitrary code execution (APSB26-78)
The version of Adobe After Effects installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-78 advisory. - After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary co...
Linux Distros Unpatched Vulnerability : CVE-2026-12482
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in...
AlmaLinux 9 : maven:3.9 (ALSA-2026:38500)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38500 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...
AlmaLinux 10 : openexr (ALSA-2026:38499)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:38499 advisory. OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing CVE-2026-41142 OpenEXR: OpenEXR: Information disclosure and denial of...
EulerOS 2.0 SP10 : haveged (EulerOS-SA-2026-2652)
According to the versions of the haveged packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged. However, while it...
Fedora 43 : prometheus (2026-6a44db4fa9)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6a44db4fa9 advisory. Update to 3.13.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
openSUSE 16: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (openSUSE-SU-2026:21282-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21282-1 advisory. This update for GraphicsMagick fixes the following issue - CVE-2026-13606: crafted Photo CD PCD file can cause memory corruption bsc1269891. Tenable has...
AlmaLinux 9 : openexr (ALSA-2026:38498)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:38498 advisory. OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing CVE-2026-41142 OpenEXR: OpenEXR: Information disclosure and denial of...
EulerOS 2.0 SP10 : python-pyasn1 (EulerOS-SA-2026-2709)
According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from...
Linux Distros Unpatched Vulnerability : CVE-2026-54706
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4...
EulerOS 2.0 SP10 : systemd (EulerOS-SA-2026-2673)
According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the...
Adobe Animate 23.x < 23.0.16 / 24.x < 24.0.14 Multiple Vulnerabilities (APSB26-83)
The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.16 or 24.0.14. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-83 advisory. - Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path...
EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2026-2667)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
Linux Distros Unpatched Vulnerability : CVE-2026-58101
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3EXTd2iext returns NULL when an extension's DER...
EulerOS 2.0 SP10 : busybox (EulerOS-SA-2026-2682)
According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BusyBox wget thru 1.3.7 accepted raw CR 0x0D/LF 0x0A and other C0 control bytes in the HTTP request- target path/query, allowing the request line...
EulerOS 2.0 SP10 : libpng (EulerOS-SA-2026-2698)
According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In...
Adobe Audition < 25.6.6 / 26.0 < 26.3 Multiple Vulnerabilities (APSB26-71) (macOS)
The version of Adobe Audition installed on the remote macOS host is prior to 25.6.6, 26.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-71 advisory. - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i...
Fortinet Fortigate Buffer overread in authd and wad daemon (FG-IR-26-154)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-154 advisory. - A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2...
EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2026-2685)
According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root...
Adobe Media Encoder < 25.6.6 / 26.0.0 < 26.3.0 Multiple Vulnerabilities (APSB26-72)
The version of Adobe Media Encoder installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-72 advisory. - Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary co...
Mozilla Firefox < 152.0.6
The version of Firefox installed on the remote Windows host is prior to 152.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-67 advisory. - We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this...
RockyLinux 10 : xorg-x11-server-Xwayland (RLSA-2026:38489)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38489 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 X.org: xorg-x11-server: GLX contextTags Use-After-Free in...
RockyLinux 9 : kernel (RLSA-2026:38491)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38491 advisory. kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling CVE-2026-22979 kernel: rtmutex: Use waiter::task instead of current...
RockyLinux 9 : xorg-x11-server-Xwayland (RLSA-2026:38490)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38490 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 X.org: xorg-x11-server: GLX contextTags Use-After-Free in...
AlmaLinux 8 : openssl (ALSA-2026:38503)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38503 advisory. openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing CVE-2026-28390 Tenable has extracted the preceding description...