358917 matches found
Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-52772)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-52772 advisory. - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 - Fix heap overflow when preparsing SQL statements with excessive...
Linux Distros Unpatched Vulnerability : CVE-2026-68341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: fix use after free in unlockovpn unlockovpn iterates over the releaselist using llistforeachentry and drops the peer reference inside the loop body via...
Photon OS 5.0: Iniparser PHSA-2026-5.0-92-0942
An update of the iniparser package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0942. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2026-73066
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an uncheck...
Security Updates for Microsoft Office Products (August 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-11-2026 advisory. - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-70311 - Access of resource using...
Linux Distros Unpatched Vulnerability : CVE-2026-12061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Natural Language Toolkit NLTK: ReDoS in NLTK ReviewsCorpusReader FEATURES regex CVE-2026-12061 Note that Nessus relies on the presence of the package as reporte...
Linux Distros Unpatched Vulnerability : CVE-2025-31938
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient granularity of access control in some subsystem for some IntelR XeonR 6 Scalable processors with IntelR TDX may allow an information disclosure...
RockyLinux 9 : gstreamer1-plugins-good (RLSA-2026:53452)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53452 advisory. gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders CVE-2026-18649 Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2026-68434
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 serial: 8250mid: Disable DMA for selected platforms replac...
RockyLinux 8 : fence-agents (RLSA-2026:53363)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53363 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the RockyLinux...
AlmaLinux 8 : fence-agents (ALSA-2026:53363)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:53363 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the AlmaLinux...
Oracle Linux 9 : fence-agents (ELSA-2026-53365)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53365 advisory. 4.10.0-110.6 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 Tenable has extracted the preceding description block directly from the Oracle Linux...
Oracle Linux 10 : isns-utils (ELSA-2026-53846)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53846 advisory. 0.103-1.1 - Fix double-free vulnerability in attrs.c error paths CVE-2026-55995 Resolves: RHEL-219472 Tenable has extracted the preceding description block...
Photon OS 5.0: Python3 PHSA-2026-5.0-92-0947
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0947. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
SUSE SLED15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3560-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3560-1 advisory. Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration...
AlmaLinux 8 : resource-agents (ALSA-2026:53364)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:53364 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the AlmaLinux...
RHEL 8 : firefox (RHSA-2026:54339)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54339 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom:...
SUSE SLED15: bouncycastle / bouncycastle-pg / bouncycastle-pkix / etc (SUSE-SU-2026:3559-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3559-1 advisory. - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185:...
Oracle Linux 10 : udisks2 (ELSA-2026-53435)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53435 advisory. 2.11.0-2.0.1.el102.1 - Enable btrfs support for OL supported arches Orabug: 37464632 2.11.0-2.1 - Rework fstab mount authorization for as-user CVE-2026-7867...
Linux Distros Unpatched Vulnerability : CVE-2026-73086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and...
Linux Distros Unpatched Vulnerability : CVE-2026-72746
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.30.0 contains a server-side authentication bypass in the RDSTLS handshake. When a server is configured with RdstlsSecurity = TRUE, the handshak...
Linux Distros Unpatched Vulnerability : CVE-2026-71194
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the sa...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500162)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500162 advisory. - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832946 CVE-2026-64561 - x86/bugs: Make...
Linux Distros Unpatched Vulnerability : CVE-2026-73142
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5xr9-fmm8-7p8x: remotetrx NetUplink: connection object leak DoS CVE-2026-73142 Note that Nessus relies on the...
RHEL 8 : xorg-x11-server-Xwayland (RHSA-2026:53450)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:53450 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow...
RHEL 9 : kernel (RHSA-2026:53329)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53329 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cxl/port: Fix use after free ...
Zoom Workplace < 7.1.0 Vulnerability (ZSB-26016)
The version of Zoom Workplace installed on the remote host is prior to 7.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26016 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to...
Fedora 44 : knot (2026-6f4584d9b3)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f4584d9b3 advisory. new upstream release including a security fix for ACL processing Tenable has extracted the preceding description block directly from the Fedora security...
ImageMagick < 6.9.13-52 / 7.x < 7.1.2-27 Heap Buffer Over-write (CVE-2026-62946)
The remote host has a version of ImageMagick installed that is prior to 6.9.13-52 or 7.x prior to 7.1.2-27. It is, therefore, affected by a heap buffer over-write vulnerability: - Processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer...
RockyLinux 8 : perl-DBI:1.641 (RLSA-2026:52772)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:52772 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced Profile...
Fedora 43 : xen (2026-9b1af4c793)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9b1af4c793 advisory. update to xen 4.20.4 includes security fixes x86 shadow paging is deprecated XSA-495, CVE-2026-42493 vIRQ event channel binding may break Xenstore...
Linux Distros Unpatched Vulnerability : CVE-2026-68307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925vifconnectiter replays firmware state for links tracked in mvif-validlinks. Afte...
Linux Distros Unpatched Vulnerability : CVE-2026-73141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion CVE-2026-73141 Note that Nessus relies on the presence of...
Fedora 43 : kernel (2026-b54e45f108)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b54e45f108 advisory. The 7.1.8 stable kernel updates contain a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream wi...
Linux Distros Unpatched Vulnerability : CVE-2026-73149
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-mh75-5pr3-qv2p: NetRx: out-of-bounds read via unvalidated MsgAudio length CVE-2026-73149 Note that Nessus reli...
Linux Distros Unpatched Vulnerability : CVE-2026-71287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti's sanitizesqlcolumn lib/functions.php sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits,...
Linux Distros Unpatched Vulnerability : CVE-2026-68239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/ttm: Account for NULL and handle pages in ttmpoolbackup Pages in ttmpoolbackup can be NULL or backup handles ttmbackuppageptrishandle, neither of which can ...
RHEL 9 : thunderbird (RHSA-2026:53475)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53475 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...
RHEL 10 : ldns (RHSA-2026:53402)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:53402 advisory. The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also defin...
Security Update for Microsoft PowerPoint Products (August 2026)
The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. Note that Nessus has not tested for this...
KB5120242: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (August 2026)
The remote Windows host is missing security update 5120242 or hotpatch 5120229. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Stack-based buffer overflow in Windows DNS...
Fedora 44 : python-webob (2026-7aaa63dd24)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7aaa63dd24 advisory. Update to upstream - CVE-2024-42353. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
Linux Distros Unpatched Vulnerability : CVE-2026-73146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion CVE-2026-73146 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2026-71217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as...
MiracleLinux 9 : python3.9-3.9.25-7.el9_8.2 (AXSA:2026-1508:06)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1508:06 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2026-73154
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow CVE-2026-73154 Note that Nessus relies on the presence of...
Linux Distros Unpatched Vulnerability : CVE-2026-68298
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vm: Fix SVM leak on resv obj alloc failure in xevmcreate Commit 9e9787414882 drm/xe/userptr: replace xehmm with gpusvm made xesvminit unconditional in...
Cisco ASA and FTD Insufficient Verification of Data Authenticity (CVE-2022-20795)
A vulnerability in the implementation of the Datagram TLS DTLS protocol in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause high CPU utilization, resulting in a denial of service DoS condition...
Linux Distros Unpatched Vulnerability : CVE-2026-68265
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vm: Fix BO prefetch with CONSULTMEMADVISEPREFLOC When prefetch region is DRMXECONSULTMEMADVISEPREFLOC for a BO VMA, the code used it as an index into...
RHEL 9 : gstreamer1-plugins-good (RHSA-2026:53452)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:53452 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...