348548 matches found
Alibaba Cloud Linux 3 : 0242: compat-libtiff3 (ALINUX3-SA-2026:0242)
The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0242 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-12912: A flaw was found in libtiff. A remo...
RHEL 8 : osbuild-composer (RHSA-2026:52390)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:52390 advisory. An image building service based on osbuild It is inspired by lorax-composer and exposes the same API. As such, it is a drop-in replacement. Security...
Alibaba Cloud Linux 3 : 0241: coreutils (ALINUX3-SA-2026:0241)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0241 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-56392: GNU coreutils unexpand is vulnerabl...
RHEL 8 : xorg-x11-server-Xwayland (RHSA-2026:52392)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52392 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow...
RHEL 9 : xorg-x11-server-Xwayland (RHSA-2026:52397)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52397 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow...
Alibaba Cloud Linux 3 : 0243: vim (ALINUX3-SA-2026:0243)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0243 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55693: Vim is an open source,...
Alibaba Cloud Linux 3 : 0247: php:7.4 (ALINUX3-SA-2026:0247)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0247 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14355: In PHP versions 8.2. before 8.2.32,...
Alibaba Cloud Linux 3 : 0240: yelp (ALINUX3-SA-2026:0240)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0240 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-13601: A flaw was found in Yelp due to an...
Alibaba Cloud Linux 3 : 0246: openssh (ALINUX3-SA-2026:0246)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0246 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55653: A flaw was found in OpenSS...
Alibaba Cloud Linux 3 : 0239: python-pillow (ALINUX3-SA-2026:0239)
The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0239 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54058: Pillow is a Python imaging...
RHEL 8 : osbuild-composer (RHSA-2026:52389)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:52389 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for...
RHEL 9 : nodejs:22 (RHSA-2026:52399)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:52399 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...
Alibaba Cloud Linux 3 : 0244: libgcrypt (ALINUX3-SA-2026:0244)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0244 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-41989: Libgcrypt before 1.12.2 sometimes...
Alibaba Cloud Linux 3 : 0245: dovecot (ALINUX3-SA-2026:0245)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0245 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-42006: An attacker can cause uncontrolled...
RHEL 10 : mod_md (RHSA-2026:52393)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52393 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...
Linux Distros Unpatched Vulnerability : CVE-2026-19387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation ...
Alibaba Cloud Linux 3 : 0238: libreswan (ALINUX3-SA-2026:0238)
The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0238 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-12413: An invalidly formatted IKE...
RHEL 7 : python3 (RHSA-2026:52400)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:52400 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Linux Distros Unpatched Vulnerability : CVE-2026-19389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from craft...
Linux Distros Unpatched Vulnerability : CVE-2026-19015
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect CA roots endpoint...
SUSE SLES12 Security Update : libssh2_org (SUSE-SU-2026:3525-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3525-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow...
Linux Distros Unpatched Vulnerability : CVE-2026-19014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization...
Debian dsa-6422 : chromium - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6422 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6422-1 [email protected] https://www.debian.org/securit...
Debian dsa-6424 : libxen-dev - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6424 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6424-1 [email protected] https://www.debian.org/securit...
Debian dla-4726 : ca-certificates - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4726 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4726-1 [email protected]...
Fedora 43 : pgadmin4 (2026-bacb14f76f)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bacb14f76f advisory. Update to pgadmin-9.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
SUSE SLES15: libpython3_10-1_0 / python310 / python310-base / python310-curses / etc (SUSE-SU-2026:3530-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3530-1 advisory. Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when t...
MiracleLinux 9 : gimp-3.0.4-4.el9_8.5 (AXSA:2026-1494:07)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1494:07 advisory. gimp: gimp: Heap buffer overflow in readchanneldata CVE-2026-58379 Tenable has extracted the preceding description block directly from the MiracleLinux...
SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:3528-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3528-1 advisory. Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...
Fedora 44 : pgadmin4 (2026-f0550055a7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f0550055a7 advisory. Update to pgadmin-9.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 44 : python-wsgidav (2026-348ad953b4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-348ad953b4 advisory. fixes the following security issues: - CVE-2026-55509 - CVE-2026-55560 Tenable has extracted the preceding description block directly from the Fedor...
Fedora 43 : python-wsgidav (2026-3808436c81)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3808436c81 advisory. fixes the following security issues: - CVE-2026-55509 - CVE-2026-55560 Tenable has extracted the preceding description block directly from the Fedor...
SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2026:3527-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3527-1 advisory. This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in...
Linux Distros Unpatched Vulnerability : CVE-2026-19016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted...
Fedora 43 : bird (2026-3521e54a27)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3521e54a27 advisory. BIRD 3.3.2 2026-07-30 - BGP: Fix stack buffer overflow in Flowspec NLRI decoder - BGP: Minor improvements in Flowspec parsing - BGP: Fix minor issues with se...
SUSE SLES15: libavcodec58_134 / libavformat58_76 / libavutil56_70 / etc (SUSE-SU-2026:3529-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3529-1 advisory. Update to release 4.4.8. - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code...
Fedora 44 : bird (2026-c2b9288d46)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c2b9288d46 advisory. BIRD 3.3.2 2026-07-30 - BGP: Fix stack buffer overflow in Flowspec NLRI decoder - BGP: Minor improvements in Flowspec parsing - BGP: Fix minor issues with se...
Linux Distros Unpatched Vulnerability : CVE-2026-15534
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in Sregmatch. The...
Fedora 44 : nghttp2 (2026-084c991d17)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-084c991d17 advisory. - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 Tenable has extracted the preceding...
SUSE SLES15 Security Update : libssh2_org (SUSE-SU-2026:3526-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3526-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598:...
Fedora 43 : udisks2 (2026-1925a10b0b)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1925a10b0b advisory. Update to the latest upstream release 2.11.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...
Linux Distros Unpatched Vulnerability : CVE-2026-17510
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in printattribute via a zero length BMPSTRING attribute. printattribute...
Debian dsa-6423 : kitty - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6423 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6423-1 [email protected] https://www.debian.org/securit...
Linux Distros Unpatched Vulnerability : CVE-2026-19012
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition...
Linux Distros Unpatched Vulnerability : CVE-2026-19113
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A...
Linux Distros Unpatched Vulnerability : CVE-2026-19017
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA...
EulerOS 2.0 SP11 : samba (EulerOS-SA-2026-3156)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the 'chec...
EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2026-3074)
According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of...
Fedora 43 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2026-b2e2c26935)
The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b2e2c26935 advisory. Update Perl to 5.42.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
FreeBSD : libXfont2 -- multiple vulnerabilities (1fae5869-9275-11f1-83e9-901b0e13f1a0)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1fae5869-9275-11f1-83e9-901b0e13f1a0 advisory. Zhixi Jace Sun, independent security researcher reports: Tenable has extracted the preceding...