346916 matches found
TencentOS Server 2: ruby (TSSA-2026:0763)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0763 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-64552
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtio-net: fix len check in receivebig receivebig bounds the device-announced length by bigpacketsnumskbfrags + 1 PAGESIZE. That is still too loose:...
Oracle APEX (CVE-2026-54285) (July 2026 CPU)
The remote host is affected by a vulnerability in Oracle APEX component: Third Party OpenTelemetry as referenced in the July 2026 Oracle Critical Patch Update CPU advisory. - Vulnerability in the Oracle APEX product component: Third Party OpenTelemetry. Easily exploitable vulnerability allows...
Fedora 43 : rpm (2026-a9f0d5370e)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a9f0d5370e advisory. Rebase to 6.0.2 https://rpm.org/releases/6.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
Linux Distros Unpatched Vulnerability : CVE-2026-54890
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive...
SUSE SLES12 Security Update : gzip (SUSE-SU-2026:3241-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3241-1 advisory. This update for gzip fixes the following issue: - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not...
Debian dsa-6401 : ctdb - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6401 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6401-1 [email protected] https://www.debian.org/securit...
MiracleLinux 9 : evince-40.5-4.el9_8.1 (AXSA:2026-1365:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1365:02 advisory. atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVE-2026-46529 Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2026-66757
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header...
Linux Distros Unpatched Vulnerability : CVE-2026-41608
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0...
Kibana 8.x < 8.19.19 / 9.3.x < 9.3.8 / 9.4.x < 9.4.4 DoS (ESA-2026-63)
The version of Kibana installed on the remote host is 8.x prior to 8.19.19, or 9.3.x prior to 9.3.8, or 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-63 advisory. - Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of servic...
RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:47180)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47180 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...
Linux Distros Unpatched Vulnerability : CVE-2026-43871
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before...
RHEL 8 : libpq (RHSA-2026:47090)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47090 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql:...
MiracleLinux 9 : postgresql-13.23-3.el9_8 (AXSA:2026-1366:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1366:07 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...
RHEL 10 : firefox (RHSA-2026:47101)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47101 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
RHEL 8 : firefox (RHSA-2026:47105)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47105 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom:...
Oracle APEX (CVE-2026-60156) (July 2026 CPU)
The remote host is affected by a vulnerability in Oracle APEX component: General as referenced in the July 2026 Oracle Critical Patch Update CPU advisory. - Vulnerability in the Oracle APEX product component: General. Easily exploitable vulnerability allows unauthenticated attacker with network...
RockyLinux 10 : go-fdo-server (RLSA-2026:46395)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:46395 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 crypto/x509: golang:...
Linux Distros Unpatched Vulnerability : CVE-2026-48145
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are...
Linux Distros Unpatched Vulnerability : CVE-2026-53669
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is ...
FreeBSD : Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input (445dc6b9-89e1-11f1-b35c-4c526214c986)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445dc6b9-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-54pw-5645-jh86 reports: A specially crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-58227
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In...
Linux Distros Unpatched Vulnerability : CVE-2026-51296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still call...
RHEL 8 : libXfont2 (RHSA-2026:47103)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47103 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001...
FreeBSD : Erlang/OTP -- denial of service via exponential certificate policy tree growth (445d674f-89e1-11f1-b35c-4c526214c986)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445d674f-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-622p-qfh6-c352 reports: A remote attacker can...
Linux Distros Unpatched Vulnerability : CVE-2026-55737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term...
SUSE SLES16 Security Update : perl-DBI (SUSE-SU-2026:22845-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22845-1 advisory. - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes...
TencentOS Server 3: python-pillow (TSSA-2026:0769)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0769 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
SUSE SLED15 / SLES15 Security Update : python-pyasn1 (SUSE-SU-2026:3238-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3238-1 advisory. - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs bsc1271464. -...
TencentOS Server 3: glibc (TSSA-2026:0772)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0772 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
SUSE SLES16 Security Update : joe (SUSE-SU-2026:22843-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22843-1 advisory. This update for joe fixes the following issue - CVE-2026-13412: improper validation in tag-file parser can lead to arbitrary command...
TencentOS Server 3: python3 (TSSA-2026:0766)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0766 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
RHEL 8 : resource-agents (RHSA-2026:47092)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47092 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...
Linux Distros Unpatched Vulnerability : CVE-2026-51303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free UAF vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via...
RockyLinux 9 : unbound (RLSA-2026:36777)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36777 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...
Oracle MySQL C++ Connector (July 2026 CPU)
The 9.7.x versions of MySQL Connector/C++ installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++. Supported versions that are affected are...
Linux Distros Unpatched Vulnerability : CVE-2026-64548
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full or nearly full, bpfmsgpushdata enters a copy fallback path and...
SUSE SLES16 Security Update : google-cloud-sap-agent (SUSE-SU-2026:22848-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22848-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...
FreeBSD : Erlang/OTP -- relative path traversal in the zip module (445e11d4-89e1-11f1-b35c-4c526214c986)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445e11d4-89e1-11f1-b35c-4c526214c986 advisory. The Erlang/OTP team reports: Fixed a bug where zip:unzip/1,2 and zip:extract/1,2 were vulnerable to a...
SUSE SLES16 Security Update : net-tools (SUSE-SU-2026:22862-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22862-1 advisory. This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Tenable...
SUSE SLES15 Security Update : kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3253-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3253-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: -...
Oracle MySQL NET Connector (July 2026 CPU)
The 9.7.x versions of MySQL Connector/Net installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. Supported versions that are affected are...
RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:47071)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47071 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...
MiracleLinux 9 : dotnet10.0-10.0.108-1.el9_8.ML.1 (AXSA:2026-1360:14)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1360:14 advisory. dotnet: .NET: infinite loop allows an attacker to cause a denial of service CVE-2026-42899 Tenable has extracted the preceding description block directly fro...
Debian dla-4702 : openjdk-11-dbg - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4702 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4702-1 [email protected]...
Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-133 (ALASECS-2026-133)
The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-133 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing...
SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:3245-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3245-1 advisory. - CVE-2026-7210: insufficient entropy used for Expat hash-flooding protection allows a crafted XML document to trigger hash flooding bsc1264962...
SUSE SLES15: kernel-livepatch-6_4_0-150600_23_84-default / etc (SUSE-SU-2026:3256-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3256-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.84 fixes various security issues: The following security issues were fixed: -...
RHEL 10 : libXfont2 (RHSA-2026:47079)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47079 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001...