391878 matches found
Rocky Linux 8 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc Multiple Vulnerabilities (crlsa-2026_92368)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692368 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 curl: libcurl: Unauthorized connection reuse due to a logica...
Debian dla-4870 : antiword - security update
The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4870 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4870-1 [email protected] https://www.debian.org/lts/security/...
Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-11.0 / aspnetcore-targeting-pack-11.0 / dotnet / etc Multiple Vulnerabilities (crlsa-2026_92511)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692511 advisory. .NET: .NET Elevation of Privilege Vulnerability CVE-2026-62909 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege...
RockyLinux 9 : .NET 10.0 (RLSA-2026:92432)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:92432 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 10.0 to S...
Linux Distros Unpatched Vulnerability : CVE-2026-119339
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls...
Fedora 45 : SDL3_image (2026-c25f10cc6c)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c25f10cc6c advisory. Update to 3.4.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Rocky Linux 9 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel (crlsa-2026_92145)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202692145 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2026-45049
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Cross-Domain Single Sign-On CDSSO servlet allows a logged-in user's raw...
Fedora 45 : python-nh3 / rust-ammonia (2026-0c4e4a39a0)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-0c4e4a39a0 advisory. Update the ammonia crate to version 4.1.8. Rebuild python-nh3 to apply security fixes RUSTSEC-2021-0156, RUSTSEC-2021-0158, RUSTSEC-2026-0373. Tenable has...
RockyLinux 8 : firefox (RLSA-2026:89756)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89756 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: thunderbird: Privilege escalation in the Application Update component...
Linux Distros Unpatched Vulnerability : CVE-2026-115274
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a...
Fedora 45 : containerd (2026-7e84de33a8)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7e84de33a8 advisory. - Update to release v2.4.2 - Resolves: rhbz2535733 - Resolves CVE-2026-41178: rhbz2515054 Tenable has extracted the preceding description block directly from...
Rocky Linux 9 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel (crlsa-2026_90812)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202690812 advisory. cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service CVE-2026-53938 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2026-119186
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM...
FreeBSD : MySQL Connectors -- Multiple vulnerabilities (24aad1ab-d452-11f1-bae2-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24aad1ab-d452-11f1-bae2-3497f65b111b advisory. Oracle reports: The October 2026 Critical Patch Update contains 98 new security patches for...
Oracle Linux 9 : bind9.18 (ELSA-2026-93072)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93072 advisory. - Prevent arbitrary code execution via GSS-TSIG UDP message replay CVE-2026-94300 - Fix Denial of service via assertion failure in RPZ query processin...
Fedora 45 : tor (2026-bfe95c54ee)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bfe95c54ee advisory. Update to latest upstream release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
RockyLinux 9 : curl (RLSA-2026:92907)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:92907 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 Tenable has extracted the preceding description block directly from...
Rocky Linux 9.6 [CIQ] Security Update: rpcbind (ciqsa-2026_1733)
The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261733 advisory. This advisory aggregates security fixes for the rpcbind SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-94640. Tenable has extracted the preceding description...
Fedora 45 : openssl3 (2026-7780decfc1)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7780decfc1 advisory. Rebase to OpenSSL 3.5.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora 45 : apptainer (2026-f8229a5172)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f8229a5172 advisory. Update to upstream 1.5.5. Includes fix for go CVE-2026-111943. Tenable has extracted the preceding description block directly from the Fedora security...
Fedora 45 : sofia-sip (2026-c8a8e02b22)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c8a8e02b22 advisory. Upstream release 1.13.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
Fedora 45 : docker-buildx (2026-61b59254db)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-61b59254db advisory. - Update to release v0.38.0 - Resolves: rhbz2544412 ---- - Update to release v0.37.2 - Resolves: rhbz2544198 - Resolves CVE-2026-56855: rhbz2530594 ...
CentOS Linux 6 [TuxCare] Security Update: ca-certificates (CENTOS6:CLSA-2026:1793112288)
The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793112288 advisory. - The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA...
Linux Distros Unpatched Vulnerability : CVE-2026-114509
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-118780
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used...
Fedora 45 : dotnet10.0 (2026-c65bed2849)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c65bed2849 advisory. Update to .NET SDK 10.0.113 and Runtime 10.0.13 Fixes:...
Linux Distros Unpatched Vulnerability : CVE-2026-8822
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk versions: 9.6.1. A specially crafted USGS DEM can lead to a buffe...
Fedora 44 : knot-resolver (2026-0e1dcc3e9e)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0e1dcc3e9e advisory. New upstream release with security updates. See release information for details. Tenable has extracted the preceding description block directly from the Fedo...
Fedora 45 : forgejo (2026-51514260c6)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-51514260c6 advisory. This is an upstream release fixing security issues and other bugs. Tenable has extracted the preceding description block directly from the Fedora security...
Rocky Linux 9 [CIQ] Security Update: ansible-collection-redhat-leapp Multiple Vulnerabilities (crlsa-2026_91490)
The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202691490 advisory. ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL data via insecure backup permissions CVE-2026-68563...
Fedora 45 : baresip / libre (2026-563e1454d9)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-563e1454d9 advisory. Baresip v4.12.0 2026-09-30 - Feature: Send Custom X-Headers on Outbound Calls - audio: thread-safe usage of psize and ptime in txthread - jbuf: safer jbufset...
Fedora 45 : sudo (2026-e0fdd4bd82)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0fdd4bd82 advisory. Fix for CVE-2026-96512 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Rocky Linux 9 [CIQ] Security Update: libX11 / libX11-common / libX11-debuginfo / libX11-debugsource / etc (crlsa-2026_91365)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202691365 advisory. libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 Tenable has extracted the preceding description block directly from the CIQ securi...
Fedora 43 : mutt (2026-02968c013c)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-02968c013c advisory. -updated to 2.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Fedora 45 : perl-libnet (2026-b9489b1aa4)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b9489b1aa4 advisory. 3.16 - Fix CVE-2026-93469 unbounded response buffering in Net::Cmd Tenable has extracted the preceding description block directly from the Fedora security...
Fedora 45 : python3.11 (2026-43ffa0e3a9)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-43ffa0e3a9 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Fedora 45 : rclone (2026-7aab7a2bbe)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7aab7a2bbe advisory. Update to 1.75.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
AlmaLinux 9.2 [TuxCare] Security Update: grafana (ALMALINUX9.2:CLSA-2026:1793397133)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793397133 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated...
Fedora 45 : openvpn (2026-e7df84fae7)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e7df84fae7 advisory. Update to upstream 2.7.8 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Rocky Linux 10.2 [CIQ] Security Update: pipewire / pipewire-alsa / pipewire-alsa-debuginfo / etc (crlsa-2026_61241)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202661241 advisory. pipewire: RAOP RTSP NULL Deref CVE-2026-14324 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus ha...
AlmaLinux 8 : tomcat (ALSA-2026:92869)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:92869 advisory. tomcat: Apache Tomcat: Security constraint bypass due to improper access control CVE-2026-65182 tomcat: Apache Tomcat: Access control bypass due to...
Linux Distros Unpatched Vulnerability : CVE-2026-119718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcachedataalloc when reading point cache...
AlmaLinux 10 : java-21-openjdk security update for AlmaLinux 10 (High) (ALSA-2026:90504)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:90504 advisory. JDK: Enhance PKCS5 padding CVE-2026-83374 JDK: Enhance TLS certificate handling CVE-2026-83376 JDK: Improve C2 loop transformations CVE-2026-83378 JDK:...
Fedora 45 : ghostscript (2026-b90bfa1339)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b90bfa1339 advisory. CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox...
Fedora 45 : xorg-x11-server-Xwayland (2026-6e2dcf8dd2)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6e2dcf8dd2 advisory. Backport a couple of fixups from upstream to fix a regression affecting proton games https://gitlab.freedesktop.org/xorg/xserver/-/workitems/1938 --...
Fedora 45 : GitPython / python-mkdocs-rss-plugin (2026-3fa772c573)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-3fa772c573 advisory. Update to 3.2.1 Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, GHSA-fx3j-rwgx-fr94, and...
Fedora 45 : perl-GD-SecurityImage (2026-825527e021)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-825527e021 advisory. Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is...
Fedora 45 : assimp (2026-022956c3bb)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-022956c3bb advisory. Backport fixes for CVE-2026-19967, CVE-2026-19969 Tenable has extracted the preceding description block directly from the Fedora security advisory...
Debian dla-4873 : dovecot-auth-lua - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4873 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4873-1 [email protected]...