358857 matches found
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099917)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099917 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nextho...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100562)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100562 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth,...
RockyLinux 9 : libXfont2 (RLSA-2026:55447)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55447 advisory. libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099759)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099759 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport reinjection Transport-mode reinjection stores a...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099918)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099918 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevfcleanrxirq prunes frames who...
Unity Linux 20.1070e Security Update: gvfs (UTSA-2026-099541)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099541 advisory. A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099519)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099519 advisory. Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101088)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101088 advisory. Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099733)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099733 advisory. In the Linux kernel, the following vulnerability has been resolved: lib: cpurmap: Avoid use after free on rmap-obj array entries When calling irqsetaffinitynotifier...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100538)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100538 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderthreadrelease When a thread exits, binderthreadrelease walks its...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099929)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099929 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipcaeaddecryptdone tipcaeaddecrypt goes straight from...
Oracle Linux 10 : bind (ELSA-2026-55437)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55437 advisory. - Validate NSEC3 signer matches owning zone CVE-2026-10723 - Reject out-of-zone NSEC next owner names CVE-2026-13321 - Fix reference-counted...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100174)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100174 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2preallocrawnoderefs result in few other places Fuzzing hit another invalid...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099535)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099535 advisory. Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in...
FreeBSD : PostgreSQL -- Multiple vulnerabilities (05d311bc-9991-11f1-bc50-6cc21735f730)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 05d311bc-9991-11f1-bc50-6cc21735f730 advisory. The PostgreSQL project reports: CVE-2026-6464: psql COPY FROM STDIN, if the copy fails before...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100702)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100702 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6vti: fix incorrect tunnel matching in vti6tnllookup In vti6tnllookup, when an exact match for ...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099748)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099748 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftexthdr: fix register tracking for FPRESENT flag nftexthdrinit passes user-controlle...
Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory. Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JS...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101165)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101165 advisory. Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6. Tenable ha...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100364)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100364 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101139)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101139 advisory. Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148,...
RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:55433)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:55433 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101156)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101156 advisory. Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and ...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101366)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101366 advisory. Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7,...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101147)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101147 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5,...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101137)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101137 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbir...
Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099490)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099490 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099965)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099965 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when...
Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099454)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099454 advisory. ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099968)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099968 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6rcv Caching saddr and daddr before pskbpull is problematic since...
Linux Distros Unpatched Vulnerability : CVE-2026-72887
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback...
Fedora 44 : pdns-recursor (2026-707054d631)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-707054d631 advisory. Update to latest upstream version Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 44 : rust-bat / rust-git-delta / rust-git-interactive-rebase-tool / etc (2026-74c4a6f82e)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-74c4a6f82e advisory. Rebuild applications that use libgit2 via the Rust bindings git2 / libgit2-sys crates with the latest version of the libgit2-sys crate. This ensures...
Linux Distros Unpatched Vulnerability : CVE-2026-49263
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes throug...
Fedora 44 : jfrog-cli (2026-9f70b173c8)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9f70b173c8 advisory. Update to 2.119.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Debian dla-4742 : libaprutil1 - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4742 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4742-1 [email protected]...
Debian dla-4741 : unzip - security update
The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4741 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4741-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-49282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the...
Linux Distros Unpatched Vulnerability : CVE-2026-20731
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper buffer restrictions for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software...
Fedora 44 : jrnl (2026-1f4ad7617f)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1f4ad7617f advisory. Update to version 4.6: fixes GHSA-rhx6-37mm-5q9r and other bugs. Tenable has extracted the preceding description block directly from the Fedora security...
Linux Distros Unpatched Vulnerability : CVE-2026-20783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper conditions check in the firmware for the IntelR NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged...
Fedora 43 : libgsasl (2026-110274a705)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-110274a705 advisory. Fix for CVE-2026-48829 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora 43 : jrnl (2026-d51fe2075c)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d51fe2075c advisory. Update to version 4.6: fixes GHSA-rhx6-37mm-5q9r and other bugs. Tenable has extracted the preceding description block directly from the Fedora security...
Fedora 44 : libgsasl (2026-f2ced62115)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f2ced62115 advisory. Fix for CVE-2026-48829 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Linux Distros Unpatched Vulnerability : CVE-2026-20786
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary wi...
Linux Distros Unpatched Vulnerability : CVE-2026-63650
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup...
Fedora 44 : stunnel (2026-67c2201ad8)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-67c2201ad8 advisory. Security bugfixes - CVE-2026-70368: Fixed an out-of-bounds memory access triggered by logging attacker-controlled protocol messages longer than 1,02...
MiracleLinux 8 : glibc-2.28-251.el8_10.40 (AXSA:2026-1373:08)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1373:08 advisory. glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings CVE-2026-5928 glibc: glibc:...
Linux Distros Unpatched Vulnerability : CVE-2026-20769
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software...
Linux Distros Unpatched Vulnerability : CVE-2026-46603
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree...