348501 matches found
Docker Engine < 29.5.1 Arbitrary Code Execution
The version of the Docker Engine Moby installed on the remote host is prior to 29.5.1. It is, therefore, affected by an arbitrary code execution vulnerability: - When a compressed archive is uploaded to a container via PUT /containers/id/archive or piped through docker cp -, the daemon resolves...
Linux Distros Unpatched Vulnerability : CVE-2026-13122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN version 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that...
Fedora 43 : mysql8.4 (2026-280245e2ea)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-280245e2ea advisory. MySQL 8.4.10 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-10.html Upstream changelog:...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : GD.pm vulnerability (USN-8484-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8484-1 advisory. It was discovered that GD.pm incorrectly handled filename arguments. An attacker could possibly use this issue to execute arbitrar...
Fedora 45 : python-tornado (2026-672e8e4169)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-672e8e4169 advisory. Automatic update for python-tornado-6.5.7-1.fc45. Changelog Mon Jun 22 2026 Peter Robinson - 6.5.7-1 - Update to 6.5.7 - CVE-2026-35536 rhbz2457335,...
PHP 8.2.x < 8.2.32
The version of PHP installed on the remote host is prior to 8.2.32. It is, therefore, affected by a vulnerability as referenced in the Version 8.2.32 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...
NVIDIA Container Toolkit < 1.19.1 TOCTOU Race Condition (June 2026)
The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.19.1. It is, therefore, affected by a vulnerability as referenced in the June 2026 advisory. - NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use...
Fedora 44 : pdns (2026-f6ac0db764)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f6ac0db764 advisory. - Update to 5.0.6 - CVE-2026-42005 Security Advisory: https://doc.powerdns.com/authoritative/security-advisories/powerdns- advisory-2026-07.html Tenable has...
Fortinet FortiSandbox 4.4.x < 4.4.9 / 5.0.x < 5.0.6 Multiple Vulnerabilities
The version of Fortinet FortiSandbox installed on the remote host is 4.4.x prior to 4.4.9 or 5.0.x prior to 5.0.6. It is, therefore, affected by multiple vulnerabilities: - An OS command injection vulnerability may allow an unauthenticated attacker to execute unauthorized commands via specificall...
Linux Distros Unpatched Vulnerability : CVE-2026-12996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak...
Cisco Secure Endpoint Multiple ClamAV DoS (cisco-sa-clamav-88cFYyxR)
According to its self-reported version, Cisco Secure Endpoint is affected by multiple vulnerabilities. - A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory...
FreeBSD : openvpn -- multiple vulnerabilities (ffa897a0-756f-11f1-b291-a74de6bb0320)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ffa897a0-756f-11f1-b291-a74de6bb0320 advisory. The OpenVPN community project team reports: ... OpenVPN 2.7.5 ... is a bugfix release fixing...
openSUSE 16 Security Update : lcms2 (openSUSE-SU-2026:21202-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21202-1 advisory. This update for lcms2 fixes the following issues - CVE-2026-41254: integer overflow in CubeSize in cmslut.c bsc1264994. - CVE-2026-42798: intege...
Linux Distros Unpatched Vulnerability : CVE-2026-54887
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling sour...
Oracle Linux 9 : mariadb:10.11 (ELSA-2026-33482)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33482 advisory. galera 26.4.20-1.0.1 - Drop nmap-ncat requirement. Orabug: 34116228 - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches...
Fedora 45 : docker-compose (2026-caecf8f2d7)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-caecf8f2d7 advisory. Automatic update for docker-compose-5.3.0-1.fc45. Changelog Thu Jul 2 2026 Bradley G Smith - 5.3.0-1 - Update to release v5.3.0 - Resolves:...
Keycloak < 26.6.4 Multiple Vulnerabilities
The version of Keycloak installed on the remote host is prior to 26.6.4. It is, therefore, affected by multiple vulnerabilities, including the following: - A user with group-admin privileges can escalate to realm-admin, gaining full administrative control over the realm. CVE-2026-9099 - An...
PHP 8.3.x < 8.3.32 Multiple Vulnerabilities
The version of PHP installed on the remote host is prior to 8.3.32. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.32 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
Linux Distros Unpatched Vulnerability : CVE-2026-11771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN version 2.1.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially...
openSUSE 16 Security Update : dnsmasq (openSUSE-SU-2026:21192-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21192-1 advisory. This update for dnsmasq fixes the following issues Update to 2.93: - CVE-2026-12725: heap buffer overflow in logquery when logging unsupported...
AlmaLinux 8 : ruby:3.3 (ALSA-2026:33515)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:33515 advisory. ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol...
NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX696604)
The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 13.1 prior to 13.1-63.18, 14.1 prior to 14.1-72.61, 13.1-FIPS/NDcPP prior to 13.1-37.272, or 14.1-FIPS prior to 14.1-72.61. It is, therefore, affected by multiple vulnerabilities: -...
openSUSE 16 Security Update : google-osconfig-agent (openSUSE-SU-2026:21210-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21210-1 advisory. This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too...
Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8488-1)
"The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8488-1 advisory. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker...
SUSE SLES15 Security Update : buildah (SUSE-SU-2026:2733-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2733-1 advisory. This update for buildah fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506:...
Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (Low Latency) vulnerabilities (USN-8497-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8497-1 advisory. It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as...
Debian dla-4665 : affs-modules-6.1.0-48-4kc-malta-di - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4665 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4665-1 [email protected]...
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8493-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8493-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
openSUSE 16 Security Update : perl-List-SomeUtils-XS (openSUSE-SU-2026:21218-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21218-1 advisory. This update for perl-List-SomeUtils-XS fixes the following issue - CVE-2026-12844: heap buffer overflow in the pairwise function bsc1269210. Tenable has...
SolarWinds Database Performance Analyzer < 2026.2 Stored XSS (CVE-2026-28322)
According to its self-reported version, the SolarWinds Database Performance Analyzer DPA installation on the remote host is prior to 2026.2. It is, therefore, affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution. Note that Nessus h...
Fedora 44 : cpp-httplib (2026-1b15ac058b)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1b15ac058b advisory. Update to 0.48.0 rhbz2481109 Security fixes - Complete the IP-host certificate identity fix from v0.47.0 for the Mbed TLS and wolfSSL backends. An...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : cifs-utils vulnerability (USN-8496-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8496-1 advisory. It was discovered that cifs-utils incorrectly dropped root privileges before looking up user information. A local attacker could...
Fedora 44 : mysql8.4 (2026-8c7f5e32c5)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8c7f5e32c5 advisory. MySQL 8.4.10 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-10.html Upstream changelog:...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : HPLIP vulnerabilities (USN-8483-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8483-1 advisory. It was discovered that HPLIP incorrectly handled certain print data. An attacker could possibly use this issue to cause...
Fedora 44 : 7zip (2026-948b74882b)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-948b74882b advisory. 7-zip 26.02 - Some bugs and vulnerabilities were fixed. Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
SUSE SLED15: cups / cups-client / cups-config / cups-ddk / cups-devel / libcups2 / etc (SUSE-SU-2026:2732-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2732-1 advisory. This update for cups fixes the following issues - CVE-2026-27447: Authorization bypass via case-insensitive...
Debian dsa-6376 : openvpn - security update
The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6376 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6376-1 [email protected] https://www.debian.org/securit...
Anthropic Claude Code 2.1.38 < 2.1.163 Sandbox Escape (CVE-2026-55607)
The version of Anthropic Claude Code installed on the remote host is 2.1.38 prior to 2.1.163. It is, therefore, affected by a sandbox escape vulnerability: - Claude Code's worktree handling allowed creation of worktrees named '.git' and navigation to worktrees outside the sandbox context, enablin...
Slackware Linux 15.0 / current libidn Vulnerability (SSA:2026-168-02)
The version of libidn installed on the remote host is prior to 1.44. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-168-02 advisory. New libidn packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descripti...
Linux Distros Unpatched Vulnerability : CVE-2026-12413
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The functi...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : curl vulnerabilities (USN-8487-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8487-1 advisory. Andrew Nesbitt discovered that curl could reuse an existing live connecti...
Linux Distros Unpatched Vulnerability : CVE-2026-49838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - gobgp - None Ubuntu Linux - Unknown description CVE-2026-49838 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2026-58381
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the readlayerblock function when processing a specially crafted PSP file...
SUSE SLED15 / SLES15 Security Update : python-tornado (SUSE-SU-2026:2726-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2726-1 advisory. This update for python-tornado fixes the following issues - CVE-2026-49853: authorization header forwarded...
openSUSE 16: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (openSUSE-SU-2026:21204-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21204-1 advisory. This update for gstreamer-plugins-bad fixes the following issue - CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG...
RARLAB WinRAR < 7.23 Heap-Based Buffer Overflow (CVE-2026-14191)
The version of RARLAB WinRAR installed on the remote Windows host is prior to 7.23. It is, therefore, affected by a heap-based buffer overflow vulnerability: - An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser. The RecItems vector is sized only when the first .rev file in...
Fedora 44 : openvpn (2026-117dbc031b)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-117dbc031b advisory. Update to upstream 2.7.5 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Microsoft Edge (Chromium) < 150.0.4078.48 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.48. It is, therefore, affected by multiple vulnerabilities as referenced in the July 11, 2026 advisory. - Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a...
Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8491-1)
"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8491-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...
openSUSE 16: docker-stable / docker-stable-bash-completion / etc (openSUSE-SU-2026:21205-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21205-1 advisory. This update for docker-stable fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validati...