347056 matches found
Oracle Linux 10 : aardvark-dns (ELSA-2026-36782)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-36782 advisory. 2:1.17.1-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 - Resolves: RHEL-170143 Tenable has extracted the preceding description...
Amazon Linux 2 : libssh2, --advisory ALAS2-2026-3813 (ALAS-2026-3813)
The version of libssh2 installed on the remote host is prior to 1.4.3-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3813 advisory. libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses i...
EulerOS Virtualization 2.10.1 : rsync (EulerOS-SA-2026-2837)
According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver...
EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2026-2873)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...
Linux Distros Unpatched Vulnerability : CVE-2026-15118
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Amazon Linux 2 : libtiff, --advisory ALAS2-2026-3823 (ALAS-2026-3823)
The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3823 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compress...
SUSE SLES15 : Recommended update for initial livepatch (SUSE-SU-2026:3130-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3130-1 advisory. This update provides the initial livepatch for this kernel update. This update does not contain any fixes and will be updated with livepatches later...
EulerOS Virtualization 2.10.0 : unbound (EulerOS-SA-2026-2872)
According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead ...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2758)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When sed is invoked with both -i in-place edit and --follow-symlinks, the function opennextfile performs two separate, non-atomic filesyste...
Oracle Linux 10 : freerdp (ELSA-2026-36203)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36203 advisory. - Backport several CVE fixes CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700 Resolves: RHEL-186978, RHEL-186967,...
AlmaLinux 10 : perl-XML-LibXML (ALSA-2026:39547)
The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:39547 advisory. perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names CVE-2026-8177 Tenable has extracted the preceding description block directl...
Debian dla-4692 : ctdb - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4692 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4692-1 [email protected]...
Oracle Linux 10 : unbound (ELSA-2026-36320)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36320 advisory. - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit te...
EulerOS Virtualization 2.12.0 : vim (EulerOS-SA-2026-2811)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...
EulerOS Virtualization 2.10.1 : expat (EulerOS-SA-2026-2818)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately...
EulerOS Virtualization 2.12.0 : python-pillow (EulerOS-SA-2026-2797)
According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...
Amazon Linux 2 : compat-libtiff3, --advisory ALAS2-2026-3822 (ALAS-2026-3822)
The version of compat-libtiff3 installed on the remote host is prior to 3.9.4-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3822 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted...
EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2026-2850)
According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...
Linux Distros Unpatched Vulnerability : CVE-2026-15126
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2761)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the maile...
EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2026-2867)
According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the...
EulerOS Virtualization 2.10.1 : mesa (EulerOS-SA-2026-2829)
According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...
EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2026-2869)
According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if...
EulerOS Virtualization 2.12.0 : bind (EulerOS-SA-2026-2768)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2726)
According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte an...
MiracleLinux 9 : vim-8.2.2637-26.el9_8.5.ML.1 (AXSA:2026-1320:18)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1320:18 advisory. vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass CVE-2026-35177 Tenable has extracted the preceding description block...
RockyLinux 8 : httpd:2.4 (RLSA-2026:42828)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42828 advisory. httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP...
SUSE SLES15 Security Update : podman (SUSE-SU-2026:3126-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3126-1 advisory. This update for podman rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...
EulerOS Virtualization 2.12.0 : httpd (EulerOS-SA-2026-2775)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Buffer Over-read vulnerability in Apache HTTP Server.CVE-2026-34059 A NULL pointer dereference in moddavlock in Apache HTTP Server...
Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-19125)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19125 advisory. - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolve...
Amazon Linux 2 : expat, --advisory ALAS2-2026-3800 (ALAS-2026-3800)
The version of expat installed on the remote host is prior to 2.1.0-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3800 advisory. libexpat before 2.8.2 has an integer overflow in storeAtts. CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in...
EulerOS Virtualization 2.10.1 : cups (EulerOS-SA-2026-2815)
According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in ...
EulerOS Virtualization 2.12.0 : libxslt (EulerOS-SA-2026-2786)
According to the versions of the libxslt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT func:result elements during stylesheet parsing...
EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-2851)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reorderin...
EulerOS Virtualization 2.10.0 : sqlite (EulerOS-SA-2026-2870)
According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attacke...
EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2026-2859)
According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the...
Linux Distros Unpatched Vulnerability : CVE-2026-15132
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2026-2820)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reorderin...
Mozilla Firefox ESR < 115.38
The version of Firefox ESR installed on the remote Windows host is prior to 115.38. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-69 advisory. - We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing thi...
Linux Distros Unpatched Vulnerability : CVE-2026-15110
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to potentially...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2764)
According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check- Time-of-Use vulnerability has been...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2723)
According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Using libcurl, when a custom Host: header is first set for an HTTP request and a second request is subsequently done using the same easy...
MiracleLinux 9 : poppler-21.01.0-24.el9_8.1 (AXSA:2026-1318:05)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1318:05 advisory. poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication CVE-2026-10118...
Linux Distros Unpatched Vulnerability : CVE-2026-15166
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service CVE-2026-15166 Note that Nessus relies on the...
Oracle Linux 10 : glibc (ELSA-2026-20594)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-20594 advisory. - CVE-2026-5450: Fix buffer overflow in scanf RHEL-172694 - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules RHEL-162885 Tenable has...
EulerOS Virtualization 2.12.0 : sqlite (EulerOS-SA-2026-2806)
According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attacke...
AlmaLinux 9 : glib2 (ALSA-2026:42089)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:42089 advisory. glib: integer underflow in gio/gdbusintrospection.c via gdbusnodeinfonewforxml CVE-2026-58016 Tenable has extracted the preceding description block directly from...
EulerOS Virtualization 2.10.0 : lcms2 (EulerOS-SA-2026-2855)
According to the versions of the lcms2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2729)
According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Buffer Over-read vulnerability in Apache HTTP Server.CVE-2026-34059 A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66...
EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2026-2842)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...