365954 matches found
Fedora 45 : python-quart-trio / python-streamlink / python-urllib3 (2026-9a652403b1)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9a652403b1 advisory. Update python-urllib3 to version 2.8.0, fixing three security issues: - The TLS configuration for HTTPS proxies could be ignored or overridden. Rated high...
RHEL 8 : gstreamer1-plugins-good (RHSA-2026:73424)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73424 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...
RHEL 10 : curl (RHSA-2026:72506)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72506 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...
AlmaLinux 10 : ipa (ALSA-2026:72279)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:72279 advisory. ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in...
Fedora 44 : python-streamlink / python-urllib3 (2026-700dc0d93d)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-700dc0d93d advisory. Update python-urllib3 to version 2.8.0, fixing three security issues: - The TLS configuration for HTTPS proxies could be ignored or overridden. Rated high...
Linux Distros Unpatched Vulnerability : CVE-2026-97025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users o...
MiracleLinux 8 : firefox-140.15.0-1.el8_10.ML.1 (AXSA:2026-1932:24)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1932:24 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings...
Linux Distros Unpatched Vulnerability : CVE-2026-65412
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gat...
RockyLinux 10 : ipa (RLSA-2026:72279)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:72279 advisory. ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in...
Linux Distros Unpatched Vulnerability : CVE-2026-100888
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkimcanonselecthdrs of the file libopendkim/dkim-canon...
SUSE SLES15 Security Update : kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4356-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4356-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: -...
Amazon Linux 2023 : gvfs, gvfs-archive, gvfs-client (ALAS2023-2026-3120)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3120 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the...
RHEL 8 : git-lfs (RHSA-2026:72805)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72805 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...
RHCOS 4 : Red Hat build of MicroShift 4.22.16 (RHSA-2026:71672)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71672 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - net/http: golang...
Amazon Linux 2 : emacs (ALAS-2026-3944)
The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3944 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap...
Linux Distros Unpatched Vulnerability : CVE-2026-97029
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox...
SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:4380-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4380-1 advisory. - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in...
Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3933)
The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3933 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...
Amazon Linux 2 : nginx (ALASNGINX1-2026-016)
The version of nginx installed on the remote host is prior to 1.30.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NGINX1-2026-016 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with OpenSSL versions =...
Ubuntu 18.04 LTS / 24.04 LTS : catdoc vulnerabilities (USN-8838-1)
The remote Ubuntu 18.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8838-1 advisory. It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could...
Slackware Linux 15.0 / current pcre2 Vulnerability (SSA:2026-271-02)
The version of pcre2 installed on the remote host is prior to 10.49. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-271-02 advisory. New pcre2 packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding descripti...
Amazon Linux 2 : policycoreutils (ALAS-2026-3949)
The version of policycoreutils installed on the remote host is prior to 2.5-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3949 advisory. A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When...
Ubuntu 18.04 LTS / 24.04 LTS : Booth vulnerability (USN-8832-1)
The remote Ubuntu 18.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8832-1 advisory. It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use...
Linux Distros Unpatched Vulnerability : CVE-2026-101910
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6 isPrivate classifier in...
TencentOS Server 3: grafana (TSSA-2026:1072)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1072 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Fedora 45 : perl-Dancer2 (2026-5e3eab9a07)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5e3eab9a07 advisory. Dancer2::Serializer::YAML::deserialize handed request bodies straight to YAML::Load. A body tagged !!perl/hash:Some::Class therefore instantiated an arbitrar...
Amazon Linux 2 : ImageMagick (ALAS-2026-3939)
The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3939 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions...
Linux Distros Unpatched Vulnerability : CVE-2026-101912
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in...
SUSE SLED15 / SLES15 Security Update : hplip (SUSE-SU-2026:4362-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4362-1 advisory. - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Exim vulnerabilities (USN-8834-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8834-1 advisory. It was discovered that Exim had an out-of-bounds write when Proxy-Protocol was used with an attacker- controlled proxy. A remote...
GitLab 15.11 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-4523)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an...
Fedora 43 : freeipa (2026-5812baee0f)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5812baee0f advisory. FreeIPA 4.13.4 security release Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html Tenable has extracted the preceding description blo...
Debian dsa-6525 : wordpress - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6525 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6525-1 [email protected] https://www.debian.org/securit...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : phpseclib vulnerabilities (USN-8830-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8830-1 advisory. It was discovered that phpseclib did not perform constant-time padding validation when using AES in CBC...
Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-132)
The version of kernel installed on the remote host is prior to 5.10.268-266.1092. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-132 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible res...
Amazon Linux 2 : crash (ALAS-2026-3937)
The version of crash installed on the remote host is prior to 8.0.4-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3937 advisory. A flaw was found in GDB's STABS debug format parser. Thereadmemberfunctions function in gdb/stabsread.c contains a linkedlist removal...
AlmaLinux 9 : kernel (ALSA-2026:71700)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:71700 advisory. kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: smb: smbdirect: introduce...
Linux Distros Unpatched Vulnerability : CVE-2026-89136
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using RPK Raw Public Key, the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited servercerttype=RawPublicKey which allowed a...
Fedora 44 : nextcloud (2026-362f1943c8)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-362f1943c8 advisory. 34.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Atlassian Jira Service Management Data Center and Server 10.0.x < 10.3.25 / 10.4.x < 11.3.11 (JSDSERVER-16759)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16759 advisory. - In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. Thi...
RHEL 8 : ruby:3.3 (RHSA-2026:72285)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72285 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management task...
RHEL 9 : ruby (RHSA-2026:72286)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72286 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management task...
RHEL 8 : libreswan (RHSA-2026:72287)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72287 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...
Atlassian Confluence 8.9.x < 9.2.22 / 9.5.x < 10.2.14 (CONFSERVER-104406)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104406 advisory. - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas help...
Fedora 45 : suricata (2026-9cf326b4f4)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9cf326b4f4 advisory. upstream bugfix/security release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
RockyLinux 10 : tomcat9 (RLSA-2026:25341)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:25341 advisory. tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 tomcat: Client certificate verification...
Fedora 45 : cinnamon / cinnamon-desktop / cinnamon-session / etc (2026-c4d5a488fe)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-c4d5a488fe advisory. - Update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but...
RHEL 9 : rrdtool (RHSA-2026:72277)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:72277 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...
Linux Distros Unpatched Vulnerability : CVE-2026-94283
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attach...
Linux Distros Unpatched Vulnerability : CVE-2026-89135
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A failed X509verifycert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind siblin...