358049 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-75899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authorit...
RHEL 9 : python-urllib3 (RHSA-2026:59409)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:59409 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
Linux Distros Unpatched Vulnerability : CVE-2026-59183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10...
AlmaLinux 8 : python3.12 (ALSA-2026:58971)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58971 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding descriptio...
RockyLinux 8 : firefox (RLSA-2026:58898)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58898 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics:...
EulerOS Virtualization 2.13.0 : sqlite (EulerOS-SA-2026-3240)
According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attacke...
RHEL 8 : python-pyasn1 (RHSA-2026:59248)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59248 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Linux Distros Unpatched Vulnerability : CVE-2026-56705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via...
RHEL 8 : postgresql-jdbc (RHSA-2026:59277)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59277 advisory. PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs...
JetBrains TeamCity < 2021.2.3 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.3. It is, therefore, affected by multiple vulnerabilities: - JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration. CVE-2022-25263 - In JetBrains TeamCity...
Linux Distros Unpatched Vulnerability : CVE-2026-76172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri is a URI parser for Node.js. During parsing it runs a legacy decoding pass over the scheme component and never re-escapes the result, and serialization...
Linux Distros Unpatched Vulnerability : CVE-2026-77634
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP is a rapid development framework for PHP. Prior to versions 4.5.12, 4.6.5, 5.1.8, 5.2.14, and 5.3.7 on their respective release lines, custom mail heade...
TencentOS Server 4: glibc (TSSA-2026:0850)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0850 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-52492
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and...
RockyLinux 9 : python3.14 (RLSA-2026:58901)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58901 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding descripti...
EulerOS Virtualization 2.13.1 : python3 (EulerOS-SA-2026-3195)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted t...
Fedora 44 : nextcloud (2026-a1368a72b4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a1368a72b4 advisory. 34.0.3 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
EulerOS Virtualization 2.13.0 : lcms2 (EulerOS-SA-2026-3218)
According to the versions of the lcms2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...
EulerOS Virtualization 2.13.1 : libxml2 (EulerOS-SA-2026-3183)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function...
EulerOS Virtualization 2.13.1 : gnutls (EulerOS-SA-2026-3173)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels,...
Oracle Linux 10 : firefox (ELSA-2026-58899)
The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-58899 advisory. 140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...
RockyLinux 8 : nodejs:24 (RLSA-2026:54371)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54371 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...
Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-59133)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59133 advisory. - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 Tenable has extracted the preceding description block directly from the Oracle Lin...
RockyLinux 10 : firefox (RLSA-2026:58899)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58899 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics...
JetBrains TeamCity < 2020.1 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2020.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have. CVE-2020-15826 - In JetBrains TeamCity before 2020.1, users...
RHEL 9 : sqlite (RHSA-2026:58936)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58936 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a sing...
RHEL 8 : gstreamer1-plugins-good (RHSA-2026:59179)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59179 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...
Fedora 43 : perl-URI (2026-09941e744b)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-09941e744b advisory. 5.36 - Apply Unicode NFC normalization in URI::idna nameprep so IDNA host encoding matches other clients instead of emitting a non-standard, non-round-trippi...
RHEL 8 : python-pyasn1 (RHSA-2026:59245)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59245 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
JetBrains TeamCity < 2021.1.4 (CVE-2022-24331)
The version of JetBrains TeamCity installed on the remote host is prior to 2021.1.4. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible. CVE-2022-24331 Note that Nessus has not tested for this issue but has...
RockyLinux 10 : python3.14 (RLSA-2026:58928)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58928 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding...
EulerOS Virtualization 2.13.1 : openldap (EulerOS-SA-2026-3186)
According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffe...
Linux Distros Unpatched Vulnerability : CVE-2026-65053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML status block without escaping it. In...
EulerOS Virtualization 2.13.1 : systemd (EulerOS-SA-2026-3202)
According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel...
EulerOS Virtualization 2.13.1 : haveged (EulerOS-SA-2026-3174)
According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...
EulerOS Virtualization 2.13.0 : vim (EulerOS-SA-2026-3244)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in...
Linux Distros Unpatched Vulnerability : CVE-2026-56702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP...
Linux Distros Unpatched Vulnerability : CVE-2026-14457
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured...
JetBrains TeamCity < 2021.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2021.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie. CVE-2022-24332 - In JetBrains TeamCity before 2021.2, blind SSRF vi...
Linux Distros Unpatched Vulnerability : CVE-2026-63073
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact...
Oracle Linux 8 : NetworkManager (ELSA-2026-58555)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58555 advisory. 1.40.16-21.0.1 - Add support for DADCONFLICT to nm-dispatcher - Drop 777 permissions from Networkmanager-dispatcher drop-in directory Orabug: 37581862 - Add a...
RHEL 9 : python-pyasn1 (RHSA-2026:59239)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59239 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
AlmaLinux 8 : python-pyasn1 (ALSA-2026:59241)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59241 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the AlmaLinux...
EulerOS Virtualization 2.13.1 : perl-HTTP-Tiny (EulerOS-SA-2026-3188)
According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.The...
Linux Distros Unpatched Vulnerability : CVE-2026-78682
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen and callers nltk.data.load,...
EulerOS Virtualization 2.13.0 : perl (EulerOS-SA-2026-3227)
According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit...
AlmaLinux 10 : python-pyasn1 (ALSA-2026:59243)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59243 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the AlmaLinux...
JetBrains TeamCity < 2024.03 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2024.03. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled...
Linux Distros Unpatched Vulnerability : CVE-2026-78376
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...
JetBrains TeamCity < 2020.1.2 (CVE-2020-27627)
The version of JetBrains TeamCity installed on the remote host is prior to 2020.1.2. It is, therefore, affected by a vulnerability: - JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection. CVE-2020-27627 Note that Nessus has not tested for this issue but has instead relied only on th...