392329 matches found
Fedora 43 : perl-Net-IDN-Encode (2026-4aec7019eb)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4aec7019eb advisory. Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. This...
Linux Distros Unpatched Vulnerability : CVE-2026-109781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-142311)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142311 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled maxxmitfrag value in...
GLSA-202610-01 : ca-certificates: Compromised Intermediate Certificate Authority
The remote host is affected by the vulnerability described in GLSA-202610-01 ca-certificates: Compromised Intermediate Certificate Authority A vulnerability has been discovered in ca-certificates. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding...
RHEL 10 : fetchmail (RHSA-2026:85959)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:85959 advisory. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail...
Debian dsa-6523 : heif-gdk-pixbuf - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6523 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6523-1 [email protected] https://www.debian.org/securit...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142333)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142333 advisory. An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. Tenable has extracted the...
Rocky Linux 10.2 [CIQ] Security Update: mariadb11.8 / mariadb11.8-backup / mariadb11.8-backup-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_84799)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684799 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 pcre2: PCRE2: Memory corruption...
RHEL 9 : rhc (RHSA-2026:79012)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:79012 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fixes:...
RockyLinux 8 : perl-DBI:1.641 (RLSA-2026:85916)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85916 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...
RHCOS 4 : OpenShift Container Platform 4.22.18 (RHSA-2026:79150)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:79150 advisory. - golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-3982...
RHEL 7 : gvfs (RHSA-2026:86606)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:86606 advisory. GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secur...
Amazon Linux 2 : unbound (ALAS-2026-4000)
The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4000 advisory. Amazon Linuxvended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enable...
Atlassian Confluence 7.2.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104511)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104511 advisory. - Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rul...
SUSE SLES15 Security Update : bind (SUSE-SU-2026:4608-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4608-1 advisory. - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662:...
Linux Distros Unpatched Vulnerability : CVE-2026-109245
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdphttprequest in libfreerdp/utils/http.c that completes TLS...
RockyLinux 9 : openexr (RLSA-2026:86983)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86983 advisory. openexr: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 openexr: OpenEXR: Denial of Service or...
Linux Distros Unpatched Vulnerability : CVE-2026-109742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
Fedora 44 : ghostscript (2026-cf31315f93)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf31315f93 advisory. CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox...
RHEL 10 : gvfs (RHSA-2026:85941)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85941 advisory. GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol...
Atlassian Confluence 7.2.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104517)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104517 advisory. - Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticat...
Fedora 44 : xen (2026-839be67202)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-839be67202 advisory. x86/AMD: ineffectual Zenbleed workaround XSA-515, CVE-2026-79608 x86: XPTI may break on huge-memory systems XSA-516, CVE-2026-79609 grant-table:...
Linux Distros Unpatched Vulnerability : CVE-2026-91332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,...
Linux Distros Unpatched Vulnerability : CVE-2026-91415
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that...
Linux Distros Unpatched Vulnerability : CVE-2026-91464
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions tha...
Linux Distros Unpatched Vulnerability : CVE-2026-109379
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timi...
Rocky Linux 10.2 [CIQ] Security Update: openexr / openexr-debuginfo / openexr-debugsource / openexr-devel / etc Multiple Vulnerabilities (crlsa-2026_84796)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684796 advisory. OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 OpenEXR: OpenEXR: Out-of-bounds write...
Linux Distros Unpatched Vulnerability : CVE-2026-109242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile-current buffer is allocated...
CentOS Linux 8.4 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792592896)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792592896 advisory. - In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a...
MiracleLinux 8 : bubblewrap-0.4.0-3.el8_10 (AXSA:2026-2108:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2108:01 advisory. bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 Tenable has extracted the preceding description...
Debian dla-4848 : libapache2-mod-php8.2 - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4848 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4848-1 [email protected]...
AlmaLinux 10 : xorg-x11-server-Xwayland (ALSA-2026:85191)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:85191 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...
Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-3221)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3221 advisory. Amazon Linuxvended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in...
RHEL 10 : gd (RHSA-2026:81518)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:81518 advisory. GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other...
RockyLinux 8 : bind (RLSA-2026:79162)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:79162 advisory. bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling CVE-2026-19667 bind: BIND: Denial of Service via...
Linux Distros Unpatched Vulnerability : CVE-2026-87255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerabilit...
Linux Distros Unpatched Vulnerability : CVE-2026-109776
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. CVE-2026-109776...
Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-141781)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141781 advisory. An issue was found in the CPython zipfile module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to...
SUSE SLES15 Security Update : grafana, system-user-grafana (SUSE-SU-2026:4600-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4600-1 advisory. - Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials...
AlmaLinux 10 : kernel (ALSA-2026:85321)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:85321 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-5293...
RHEL 8 : libxml2 (RHSA-2026:79120)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79120 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...
Atlassian Confluence < 9.2.22 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104514)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104514 advisory. - nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module...
Linux Distros Unpatched Vulnerability : CVE-2026-109349
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::newfromheader: the pack header decoder accepts version 3, but a...
Linux Distros Unpatched Vulnerability : CVE-2026-109736
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. CVE-2026-109736...
RockyLinux 8 : .NET 10.0 (RLSA-2026:86192)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86192 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service...
Atlassian Confluence 9.1.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104515)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104515 advisory. - The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength when decoding JSON object property...
RHEL 8 : flatpak-builder (RHSA-2026:86714)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:86714 advisory. Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: flatpak-builder: Host code execution via git am hook execution in patc...
RockyLinux 10 : rust-sequoia-sq (RLSA-2026:85848)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:85848 advisory. hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records CVE-2026-93657 rustls-webpki: rustls-webpki: Denial of Service v...
Linux Distros Unpatched Vulnerability : CVE-2026-109786
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an on suffix after the host address. Because OpenSSH logs the...
Rocky Linux 10.2 [CIQ] Security Update: wireshark / wireshark-cli / wireshark-cli-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_84721)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684721 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...