346678 matches found
Hanwha Vision Cameras Improper Input Validation (CVE-2024-54011)
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and...
HP LaserJet Printers Improper Verification of Cryptographic Signature (CVE-2018-5923)
In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...
RHEL 7 : gstreamer1-plugins-good (RHSA-2026:49603)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:49603 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...
RHEL 8 : ldns (RHSA-2026:49520)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:49520 advisory. The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define...
HP LaserJet Printers Classic Buffer Overflow (CVE-2019-6327)
HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an IPP Parser potentially vulnerable to Buffer Overflow. This plugin only works with Tenable.ot. Please visit...
HP LaserJet Printers Classic Buffer Overflow (CVE-2023-35178)
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
MiracleLinux 8 : [security - high] pki-deps:10.6, xsom-0-19.20110809svn.module+el8+2015+b4b2375a (AXSA:2026-1419:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1419:01 advisory. jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution CVE-2026-54513 Tenable has extracted the preceding description block...
RHEL 8 : gstreamer1-plugins-good (RHSA-2026:49602)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:49602 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...
Linux Distros Unpatched Vulnerability : CVE-2026-68742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. ...
HP LaserJet Printers Classic Buffer Overflow (CVE-2023-35176)
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...
RockyLinux 9 : pipewire (RLSA-2026:47082)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47082 advisory. pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 Tenable has extracted the preceding description block...
RockyLinux 8 : libtiff (RLSA-2026:47184)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47184 advisory. libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 Tenable has extracted the preceding description block...
RHEL 9 : perl-Archive-Tar (RHSA-2026:49525)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:49525 advisory. Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also...
HP LaserJet Printers Classic Buffer Overflow (CVE-2023-27971)
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
MiracleLinux 8 : kernel-4.18.0-553.147.1.el8_10 (AXSA:2026-1414:57)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1414:57 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly limited...
Fedora 44 : goaccess (2026-b1c2d1af74)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b1c2d1af74 advisory. Update to goaccess 1.11. Notable fixes: - Fixed a heap buffer overflow when parsing malformed Opera user agents - Fixed an infinite loop while writing log...
RHEL 8 : libtiff (RHSA-2026:47184)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47184 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-bas...
RHEL 7 : postgresql (RHSA-2026:49521)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49521 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL libpq: Buffer overflow...
openSUSE 16: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (openSUSE-SU-2026:21508-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21508-1 advisory. - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. - CVE-2026-39872:...
openSUSE 16 Security Update : spice-vdagent (openSUSE-SU-2026:21506-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21506-1 advisory. - CVE-2026-57965: integer overflow in udscswrite allows a compromised SPICE host to crash the spice- vdagent daemon via a specially crafted...
openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21514-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21514-1 advisory. Changes in chromium: - Chromium 151.0.7922.71 boo1272936: CVE-2026-17650: Use after free in Compositing CVE-2026-17651: Insufficient validation ...
FreeBSD : Weechat -- Multiple vulnerabilities (12d42997-8e54-11f1-8144-8447094a420f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 12d42997-8e54-11f1-8144-8447094a420f advisory. The Weechat project reports: Tenable has extracted the preceding description block directly fr...
openSUSE 16: warewulf4 / warewulf4-dracut / warewulf4-man / warewulf4-overlay / etc (openSUSE-SU-2026:21509-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21509-1 advisory. Changes in warewulf4: - updated golang.org/x/text to v0.40.0 to fix CVE-2026-56852 bsc1272014 Tenable has extracted the preceding description block...
GeoVision GV-LPC2011 and GV-LPC2211 Cross-site Scripting (CVE-2026-42366)
Multiple reflected cross-site scripting xss vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this...
GeoVision GV-LPC2011 and GV-LPC2211 Cross-site Scripting (CVE-2026-7371)
Multiple reflected cross-site scripting xss vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this...
Konica Bizhub Multifunction Printers Insufficiently Protected Credentials (CVE-2022-29588)
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
GeoVision GV-LPC2011 and GV-LPC2211 Predictable from Observable State (CVE-2026-42365)
A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability. This plugin only works...
Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP Module and FX5-ENET/IP Ethernet Module Always-Incorrect Control Flow Implementation (CVE-2026-1874)
Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allo...
openSUSE 16 Security Update : python-joserfc (openSUSE-SU-2026:21515-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21515-1 advisory. Changes in python-joserfc: - CVE-2026-62995: acceptance of JWTs with trailing padding can lead to JWT malleability and allows for bypass of token...
Cisco Small Business SPA500 Series IP Phones Local Code Execution (CVE-2019-15959)
A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit...
Hanwha Vision Cameras OS Command Injection (CVE-2024-54012)
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...
HP LaserJet Printers Server-Side Request Forgery (CVE-2023-35175)
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model. This plugin only works with Tenable.ot. Please visit...
RHEL 9 : xorg-x11-server (RHSA-2026:49515)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:49515 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user...
MiracleLinux 8 : dovecot-2.3.16-8.el8_10 (AXSA:2026-1416:05)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1416:05 advisory. dovecot: Dovecot: Denial of Service via excessive IMAP bracing CVE-2026-42006 Tenable has extracted the preceding description block directly from the...
RHEL 8 : yelp (RHSA-2026:47177)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47177 advisory. Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, includin...
MiracleLinux 9 : golang-1.26.4-1.el9_8 (AXSA:2026-1418:07)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1418:07 advisory. net/textproto: golang: Golang net/textproto: Misleading error messages via input injection CVE-2026-42507 Bug Fixes and Enhancements: Update Go to version...
HP LaserJet Printers Out-of-bounds Write (CVE-2023-35177)
Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
RockyLinux 9 : nodejs:22 (RLSA-2026:47058)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47058 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed tar...
Fedora 43 : nsd (2026-0b77a23312)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0b77a23312 advisory. FEATURES: Merge 483 from ruuda: Improve Prometheus metrics: Move zonestats from metric name to label BUG FIXES: Fix 478: Feature request: reduce...
RHEL 8 : perl-Archive-Tar (RHSA-2026:49524)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:49524 advisory. Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also...
Oracle Linux 9 : libreswan (ELSA-2026-46397)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-46397 advisory. - Backport fix for CVE-2026-14957 RHEL-212107 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
HP LaserJet Printers Out-of-bounds Write (CVE-2023-27973)
Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
RockyLinux 9 : gstreamer1-plugins-bad-free (RLSA-2026:47179)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47179 advisory. gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer CVE-2026-59691 gstreamer: gstreamer: DTLS certificate Subjec...
RockyLinux 8 : yelp (RLSA-2026:47177)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47177 advisory. yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications CVE-2026-13601 Tenable has extracted the...
RHEL 9 : frr10 (RHSA-2026:49607)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:49607 advisory. FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi- threaded approach to resolve the current...
Fedora 43 : goaccess (2026-a488a993d1)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a488a993d1 advisory. Update to goaccess 1.11. Notable fixes: - Fixed a heap buffer overflow when parsing malformed Opera user agents - Fixed an infinite loop while writing log...
RHEL 9 : rhc (RHSA-2026:49600)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:49600 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...
Linux Distros Unpatched Vulnerability : CVE-2026-68945
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - @angular/common: Angular: Cross-Request Response Reuse and State Poisoning in HttpTransferCache CVE-2026-68945 Note that Nessus relie...
Lexmark Printers Cross-site Scripting (CVE-2013-6033)
Multiple cross-site scripting XSS vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printer...
Hanwha Vision Cameras Missing Authentication for Critical Function (CVE-2024-54013)
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the...