391878 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-103506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions missing authorization. This...
Linux Distros Unpatched Vulnerability : CVE-2026-111819
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Amazon Linux 2023 : cuda-drivers (ALAS2023NVIDIA-2026-316)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-316 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...
RHEL 8 : sudo (RHSA-2026:92349)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:92349 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
Linux Distros Unpatched Vulnerability : CVE-2026-118485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding httpdecode on the output filename after the URL has been parsed and the filename...
Linux Distros Unpatched Vulnerability : CVE-2026-118651
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-supplied X-Real-IP header and forward it to an upstream servic...
MiracleLinux 8 : libXrender-0.9.10-8.el8_10 (AXSA:2026-2199:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2199:01 advisory. libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats CVE-2026-88807 Tenable has extracted the preceding description block...
CentOS Linux 7 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (CENTOS7:CLSA-2026:1793035649)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793035649 advisory. - An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function i...
Fedora 44 : firefox (2026-31601794bf)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-31601794bf advisory. - Updated to latest upstream 159.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...
Linux Distros Unpatched Vulnerability : CVE-2026-115942
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the...
Oracle Application Testing Suite (October 2026 CPU)
The versions of Oracle Application Testing Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in Oracle Application Testing Suite component: OpenScript. The supported version that is affected is 13.3.0.1...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147047)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147047 advisory. A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter. A client that sets up multiple SyncCounters can trigger a use-after-free whe...
Linux Distros Unpatched Vulnerability : CVE-2026-118264
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a client WebSocket upgrade request before...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146968)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146968 advisory. An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed...
AlmaLinux 9.2 [TuxCare] Security Update: libevent / libevent-devel / libevent-doc (ALMALINUX9.2:CLSA-2026:1793288504)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793288504 advisory. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c...
Amazon Linux 2023 : nvidia-open (ALAS2023NVIDIA-2026-314)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-314 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...
FreeBSD : p5-MIME-Tools -- multiple vulnerabilities (2b2d5d3e-d2c8-11f1-97dc-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2b2d5d3e-d2c8-11f1-97dc-40b034429ecf advisory. MIME-tools project reports: Many security issues were addressed see the following ten CVEs...
AlmaLinux 9.6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.6:CLSA-2026:1793280119)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793280119 advisory. - A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by strippi...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libreoffice (UTSA-2026-147042)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147042 advisory. LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stac...
MiracleLinux 8 : brotli-1.0.6-5.el8_10.ML.1 (AXSA:2026-2203:05)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2203:05 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the MiracleLinux...
Rocky Linux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc (ALMALINUX9.6:CLSA-2026:1793305644)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793305644 advisory. - GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory content...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147010)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147010 advisory. Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overfl...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146977)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146977 advisory. The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl-DBI (UTSA-2026-147046)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147046 advisory. DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not...
RHEL 9 : mrtg (RHSA-2026:91644)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:91644 advisory. The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provid...
Oracle Linux 10 : bind (ELSA-2026-92419)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-92419 advisory. - Prevent arbitrary code execution via GSS-TSIG UDP message replay CVE-2026-94300 - Fix Denial of service via assertion failure in RPZ query processi...
RockyLinux 8 : webkit2gtk3 (RLSA-2026:91636)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:91636 advisory. chromium-browser: angle: Use after free in ANGLE CVE-2026-95325 chromium-browser: angle: Out of bounds write in ANGLE CVE-2026-95331 chromium-browser:...
RHEL 8 : python-urllib3 (RHSA-2026:90759)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:90759 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (CENTOS8.5:CLSA-2026:1793260141)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793260141 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated...
Linux Distros Unpatched Vulnerability : CVE-2026-110910
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Summary qs.stringify with allowEmptyArrays: true writes the key of an empty array without encoding it, even though keys are encoded by default. A key that...
RHEL 10 : bind (RHSA-2026:90328)
"The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90328 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVE...
RHEL 8 : kernel (RHSA-2026:91585)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:91585 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Servi...
RHEL 10 : libXtst (RHSA-2026:91612)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:91612 advisory. X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286...
AlmaLinux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc (ALMALINUX9.6:CLSA-2026:1793305644)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793305644 advisory. - GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: util-linux (UTSA-2026-146975)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146975 advisory. A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libreoffice (UTSA-2026-146996)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146996 advisory. LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checke...
Amazon Linux 2023 : kmod-nvidia-latest-dkms (ALAS2023NVIDIA-2026-322)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-322 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...
RHEL 9 : kernel (RHSA-2026:91489)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:91489 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: Duplicate SPI Handling...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nginx (UTSA-2026-146978)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146978 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's...
RHEL 9 : kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 (RHSA-2026:91639)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:91639 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
AlmaLinux 9 : ignition (ALSA-2026:91719)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:91719 advisory. crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-111943 Tenable has extracted the preceding descriptio...
RHEL 8 : libXtst (RHSA-2026:91294)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:91294 advisory. X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286 F...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147002)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147002 advisory. A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow conditi...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcs (UTSA-2026-147011)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147011 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with...
CentOS Linux 7 [TuxCare] Security Update: openssl11 / openssl11-devel / openssl11-libs / openssl11-static (CENTOS7:CLSA-2026:1793022066)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793022066 advisory. - Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap...
RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92057)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92057 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...
FreeBSD : p5-GD -- OS command injection (2b47c440-d2c0-11f1-97dc-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2b47c440-d2c0-11f1-97dc-40b034429ecf advisory. GD project reports: Fix CVE-2026-11526, command injection via 2-arg open in makefilehandle. CWE-78,...
Linux Distros Unpatched Vulnerability : CVE-2026-118688
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl-DBI (UTSA-2026-147045)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147045 advisory. DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characte...
Alibaba Cloud Linux 3 : 0332: brotli (ALINUX3-SA-2026:0332)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0332 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-111497: A buffer overflow vulnerability in...