348131 matches found
Fedora 43 : xorg-x11-server-Xwayland (2026-6a00d3109f)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6a00d3109f advisory. Update to xwayland 24.1.13, fixes for: CVE-2026-55999, CVE-2026-56000 Tenable has extracted the preceding description block directly from the Fedora...
Fedora 44 : perl-Crypt-DSA (2026-fcfc08d46c)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fcfc08d46c advisory. This update, to the current upstream release, addresses a cryptographic flaw modulo bias in key generation that could lead to private key compromise...
Fedora 43 : python-tornado (2026-23656e6d2f)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-23656e6d2f advisory. Update to 6.5.7 - CVE-2026-35536 rhbz2457335, CVE-2026-31958 rhbz2451660 Tenable has extracted the preceding description block directly from the...
Linux Distros Unpatched Vulnerability : CVE-2024-56803
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character esca...
Linux Distros Unpatched Vulnerability : CVE-2026-61465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can...
Fedora 43 : tmux (2026-7fa12630d5)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7fa12630d5 advisory. fdf6afc update to 3.7b fixes rhbz2498485 CHANGES FROM 3.7a TO 3.7b Fix so that the end of a synchronized update again triggers a redraw. CHANGES FROM 3.7 TO...
Linux Distros Unpatched Vulnerability : CVE-2026-26982
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ghostty is a cross-platform terminal emulator. Ghostty allows control characters such as 0x03 Ctrl+C in pasted and dropped text. These can be used to execute...
SUSE SLES15: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-plugin-kdb-ldap / etc (SUSE-SU-2026:2847-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2847-1 advisory. This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read...
Linux Distros Unpatched Vulnerability : CVE-2018-1337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS...
Debian dsa-6387 : chromium - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6387 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6387-1 [email protected] https://www.debian.org/securit...
SUSE SLES11: kernel-default / kernel-default-base / kernel-ec2 / kernel-ec2-base / etc (SUSE-SU-2026:2839-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2839-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-68324:...
Fedora 44 : p11-kit (2026-695fd36daa)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-695fd36daa advisory. - server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit CVE-2026-13757 - fixed confusing error...
Fedora 44 : webkitgtk (2026-3bc4b3ccb3)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3bc4b3ccb3 advisory. Fire scrollend event for instant programmatic scrolls. Increase network idle connection timeout to 115 seconds. Fix several crashes and rendering...
Fedora 43 : acl (2026-67504c329b)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-67504c329b advisory. rebase to v2.4.0 to fix CVE-2026-54369 and CVE-2026-54370 Resolves: CVE-2026-54369 Resolves: CVE-2026-54370 Tenable has extracted the preceding...
openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21279-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21279-1 advisory. Changes in chromium: - Chromium 150.0.7871.100: stability improvements, no further information available - promote Chromium 150 150.0.7871.46 to...
Fedora 44 : log4cxx (2026-43767b6007)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-43767b6007 advisory. Update to log4cxx 1.7.0. New features: fallback-ref appender attribute, Qt CMake findpackage component, TelnetAppender NonBlocking option. Bug fixes: non-ASC...
Fedora 44 : chromium (2026-7e82bf89f4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7e82bf89f4 advisory. Update to 150.0.7871.114 CVE-2026-15112: Use after free in Ozone CVE-2026-15129: Use after free in Views CVE-2026-15132: Uninitialized Use in V8...
openSUSE 16: curl / curl-fish-completion / curl-zsh-completion / libcurl-devel / etc (openSUSE-SU-2026:21272-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21272-1 advisory. This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for...
SUSE SLES12: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-doc / etc (SUSE-SU-2026:2849-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2849-1 advisory. This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read bsc1268131. Tenabl...
SUSE SLES15: terraform-provider-aws / terraform-provider-azurerm / etc (SUSE-SU-2026:2850-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2850-1 advisory. This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google,...
Fedora 43 : libXfont2 (2026-18ea3f47f8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-18ea3f47f8 advisory. libXfont2 2.0.8 CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Tenable has extracted the preceding description block directly from the Fedora securi...
SUSE SLED15: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-plugin-kdb-ldap / etc (SUSE-SU-2026:2848-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2848-1 advisory. This update for krb5, krb5-mini fixes the following issues - CVE-2026-11850: integer underflow in berval2tldat...
Linux Distros Unpatched Vulnerability : CVE-2026-56372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An...
Linux Distros Unpatched Vulnerability : CVE-2026-61870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by...
Linux Distros Unpatched Vulnerability : CVE-2026-61861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory...
Linux Distros Unpatched Vulnerability : CVE-2020-10941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information an RSA private key by measuring cache usage during an import. CVE-2020-10941 Note th...
Linux Distros Unpatched Vulnerability : CVE-2026-53450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, coturn rejects loopback peers by default unless allow-loopback-peers is...
Fedora 44 : python-dulwich (2026-fbd55e52fb)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fbd55e52fb advisory. 1.2.9, CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
Linux Distros Unpatched Vulnerability : CVE-2026-61857
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious...
openSUSE 16 Security Update : rust-keylime (openSUSE-SU-2026:21274-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21274-1 advisory. Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on...
Linux Distros Unpatched Vulnerability : CVE-2024-37305
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum...
SUSE SLED15 / SLES15 Security Update : perl-List-SomeUtils-XS (SUSE-SU-2026:2845-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2845-1 advisory. This update for perl-List-SomeUtils-XS fixes the following issue - CVE-2026-12844: heap buffer overflow in the pairwise...
Debian dla-4677 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4677 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4677-1 [email protected]...
SUSE SLED15 / SLES15 Security Update : dracut (SUSE-SU-2026:2851-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2851-1 advisory. This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injectio...
openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21276-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21276-1 advisory. Changes in apptainer: - Enable building of SUID starter for SLES 15 jscPED-16347. Security fix for CVE-2026-2303 bsc1270529: Heap Out-of-Bounds Read in...
Fedora 43 : docker-compose (2026-8e7eb40534)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8e7eb40534 advisory. Update to release v5.3.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
Fedora 43 : perl-HTML-Gumbo (2026-a457bf78b4)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a457bf78b4 advisory. This package provides the Perl module HTML::Gumbo. Versions before 0.19 disclose heap memory via type confusion. Support for the element was added to libgumb...
RockyLinux 8 : kernel-rt (RLSA-2026:36365)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36365 advisory. kernel: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CVE-2026-43112 Tenable has extracted the preceding description block directly from the...
Fedora 44 : acl (2026-6b9a652463)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6b9a652463 advisory. rebase to v2.4.0 to fix CVE-2026-54369 and CVE-2026-54370 Resolves: CVE-2026-54369 Resolves: CVE-2026-54370 Tenable has extracted the preceding...
Fedora 44 : librabbitmq (2026-fc2f661416)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fc2f661416 advisory. Version 0.17.0 - 2026-07-01 Security - Fix sizet overflow in amqpdecodebytes bounds check leading to out-of-bounds read GHSA- jgjf-7fwf-f3c7, 888 - Fix heap...
RockyLinux 8 : kernel (RLSA-2026:36366)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36366 advisory. kernel: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CVE-2026-43112 Tenable has extracted the preceding description block directly from the...
Fedora 44 : perl-HTML-Gumbo (2026-75010c7f44)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-75010c7f44 advisory. This package provides the Perl module HTML::Gumbo. Versions before 0.19 disclose heap memory via type confusion. Support for the element was added to libgumb...
Fedora 43 : prometheus (2026-4179e03375)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4179e03375 advisory. Update to 3.13.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
RockyLinux 10 : kernel (RLSA-2026:36956)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36956 advisory. kernel: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange CVE-2025-71066 kernel: sctp: revalidate list cursor afte...
Linux Distros Unpatched Vulnerability : CVE-2026-15276
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in pdeljanov Symphonia up to 0.6.0. This vulnerability affects unknown code of the component Metadata Handler. This manipulation causes...
Fedora 44 : jfrog-cli (2026-a5e27945f7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a5e27945f7 advisory. Update to 2.112.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Fedora 44 : attr (2026-daa458d11d)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-daa458d11d advisory. rebase to v2.6.0 to fix CVE-2026-54371 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
Debian dla-4676 : wireless-regdb - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4676 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4676-1 [email protected] https://www.debian.org/lts/security/ B...
Fedora 44 : cjson (2026-0c3f6c7c67)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0c3f6c7c67 advisory. Update to version 1.7.19. https://github.com/DaveGamble/cJSON/blob/v1.7.19/CHANGELOG.md Tenable has extracted the preceding description block direct...
Photon OS 3.0: Krb5 PHSA-2023-3.0-0624
An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0624. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...