357579 matches found
Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105426)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105426 advisory. In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler,...
Fedora 44 : mingw-expat (2026-f5e2a6b9b5)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f5e2a6b9b5 advisory. Update to expat-2.8.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105458)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105458 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter modu...
Fedora 43 : gvfs (2026-571b7e1505)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-571b7e1505 advisory. Fix CVE-2026-84267, CVE-2026-84268, CVE-2026-84269, and CVE-2026-84270 Tenable has extracted the preceding description block directly from the Fedor...
Linux Distros Unpatched Vulnerability : CVE-2026-84380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105456)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105456 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Binder objects are processed and copied individually...
RHEL 8 : kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 (RHSA-2026:62558)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62558 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...
AlmaLinux 10 : wget (ALSA-2026:62142)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62142 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or...
AlmaLinux 8 : kernel-rt (ALSA-2026:63013)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:63013 advisory. kernel: s390/cpumsf: Handle CPU hotplug remove during sampling CVE-2024-57849 kernel: smc91x: fix broken irq-context in PREEMPTRT CVE-2025-71132 kernel:...
RHEL 9 : python3.12 (RHSA-2026:62809)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62809 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Linux Distros Unpatched Vulnerability : CVE-2026-84394
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but do...
RockyLinux 8 : gegl04 (RLSA-2026:62420)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62420 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fr...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-105550)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105550 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header a...
Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-105544)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105544 advisory. A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than...
Fedora 44 : syncthing (2026-c33332bcf7)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c33332bcf7 advisory. 2.1.3, fix for CVE-2026-40898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...
Debian dla-4767 : keystone - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4767 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4767-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-52132
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a...
Linux Distros Unpatched Vulnerability : CVE-2026-82522
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiti...
Linux Distros Unpatched Vulnerability : CVE-2026-75538
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length...
Linux Distros Unpatched Vulnerability : CVE-2026-84838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress...
Linux Distros Unpatched Vulnerability : CVE-2026-84308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php...
MiracleLinux 9 : java-25-openjdk-25.0.4.1.1-1.1.el9.ML.1 (AXSA:2026-1741:09)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1741:09 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Improve font loading CVE-2026-70906 JDK: Enhance TL...
Fedora 44 : mingw-openexr (2026-54d00b8af5)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-54d00b8af5 advisory. Update to openexr 3.4.15 resp 3.3.14. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Linux Distros Unpatched Vulnerability : CVE-2026-84366
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler...
Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105436)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105436 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: Fix return type of netcpndostartxmit With clang's kernel control flow integrit...
Linux Distros Unpatched Vulnerability : CVE-2026-84358
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof...
Linux Distros Unpatched Vulnerability : CVE-2026-84309
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes...
Linux Distros Unpatched Vulnerability : CVE-2026-84347
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-80229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - curl - None Ubuntu Linux - Unknown description CVE-2026-80229 Note that Nessus relies on the presence of the package as reported by the vendor...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-105549)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105549 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response...
RHCOS 4 : OpenShift Container Platform 4.19.45 (RHSA-2026:60452)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60452 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...
Fedora 44 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-e6ca27403f)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6ca27403f advisory. Update to 1.28.6. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Linux Distros Unpatched Vulnerability : CVE-2026-84165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an...
openSUSE 16 Security Update : c-ares (openSUSE-SU-2026:21721-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21721-1 advisory. Updat to c-ares 1.36.8. - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via aresgetaddrinfo over...
Fedora 43 : mingw-openexr (2026-bcc9ac580d)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bcc9ac580d advisory. Update to openexr 3.4.15 resp 3.3.14. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Fedora 43 : mingw-gstreamer1-plugins-base / mingw-gstreamer1-plugins-good (2026-bcfa11cd3b)
The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-bcfa11cd3b advisory. Backport multiple security fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
Debian dla-4769 : libass-dev - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4769 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4769-1 [email protected] https://www.debian.org/lts/security/...
Linux Distros Unpatched Vulnerability : CVE-2026-84372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, pipeline handling on aggregate cluster an...
Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105434)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105434 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbusadddev devsetname in soundbusaddone allocate...
Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105425)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105425 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter If deviceregister fails in...
Linux Distros Unpatched Vulnerability : CVE-2026-84382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip,...
Linux Distros Unpatched Vulnerability : CVE-2026-74835
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP...
Linux Distros Unpatched Vulnerability : CVE-2026-80231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-80231 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...
ManageEngine Access Manager Plus < Build 4405 SQLi (CVE-2026-14828)
According to its self-reported build number, the ManageEngine Access Manager Plus application running on the remote host is prior to build 4405. It is, therefore, affected by an authenticated SQL injection vulnerability. An authenticated, remote attacker can exploit this by crafting a malicious...
Linux Distros Unpatched Vulnerability : CVE-2026-65108
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None CVE-2026-65108 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...
RHEL 8 : perl-DBI (RHSA-2026:62667)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:62667 advisory. DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions,...
RHEL 8 : gegl (RHSA-2026:62425)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:62425 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...
Linux Distros Unpatched Vulnerability : CVE-2026-74994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The modauth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collaps...
Linux Distros Unpatched Vulnerability : CVE-2026-52295
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of service via the libavformat/iamfwriter.c component CVE-2026-5229...
Linux Distros Unpatched Vulnerability : CVE-2026-63435
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and...