391878 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-99175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsnotify: prevent mark additions during connector teardown fsnotifydestroymarks keeps a reference to its current mark while it drops conn-lock to destroy the...
Linux Distros Unpatched Vulnerability : CVE-2026-116132
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146839)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146839 advisory. In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we...
Linux Distros Unpatched Vulnerability : CVE-2026-118306
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via ...
Amazon Linux 2 : ca-certificates (ALAS-2026-4045)
The version of ca-certificates installed on the remote host is prior to 2025.2.76-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4045 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included...
MiracleLinux 8 : grafana-9.2.10-36.el8_10 (AXSA:2026-2173:33)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2173:33 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via...
Linux Distros Unpatched Vulnerability : CVE-2026-118314
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the...
Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc (crlsa-2026_89745)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202689745 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 Tenable has extracted the preceding description block directly from the CIQ...
Linux Distros Unpatched Vulnerability : CVE-2026-117924
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
Linux Distros Unpatched Vulnerability : CVE-2026-116271
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146673)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146673 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctpprocessstrresetoutreq,...
Linux Distros Unpatched Vulnerability : CVE-2026-117912
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,...
Linux Distros Unpatched Vulnerability : CVE-2026-99134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: fix data race and NULL deref on local-assocdev local-assocdev is shared between the association path and the association-response worker without comm...
Linux Distros Unpatched Vulnerability : CVE-2026-99110
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix heap overflow in cifsdosetacl cifssetacl validates ACL size using posixaclxattrsize: 4 + count 8 // 4-byte header + 8 bytes per ACE cifsdosetac...
Jenkins LTS < 2.580.2 / Jenkins weekly < 2.588 Multiple Vulnerabilities
According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.580.2 or Jenkins weekly prior to 2.588. It is, therefore, affected by multiple vulnerabilities: - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146838)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146838 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpiexopcode3A1T1R midop Add overflow check for Index + Length to...
MiracleLinux 9 : grafana-10.2.6-23.el9_8.7 (AXSA:2026-2189:34)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2189:34 advisory. grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/http: golang: golang: Denial of Service via crafted HT...
Linux Distros Unpatched Vulnerability : CVE-2026-118006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118006...
AlmaLinux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793115241)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793115241 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and...
Linux Distros Unpatched Vulnerability : CVE-2026-99173
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Free the eventfsinode after an rcu grace period too tracefsdrevalidate reads -isfreed of the eventfsinode that dentry-dfsdata points to, and -drevalida...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146637)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146637 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Quiesce response IRQ before freeing request queue qla2xxxdeleteqpair deletes the...
Linux Distros Unpatched Vulnerability : CVE-2026-99178
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF page not present event arrives through the PF vector, and its reason sits in the...
MiracleLinux 8 : grafana-pcp-5.1.1-19.el8_10 (AXSA:2026-2172:14)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2172:14 advisory. crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 net/http: net/http/internal/http2:...
TencentOS Server 4: python-pillow (TSSA-2026:1206)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1206 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146678)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146678 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gsskrb5unwrapv2 against short tokens gsskrb5unwrapv2 reads the EC and RRC header...
AlmaLinux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793184227)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793184227 advisory. - Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization heade...
Linux Distros Unpatched Vulnerability : CVE-2026-117990
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,...
Linux Distros Unpatched Vulnerability : CVE-2026-118019
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118019 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2026-99151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink befor...
Linux Distros Unpatched Vulnerability : CVE-2026-116590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int...
Linux Distros Unpatched Vulnerability : CVE-2026-117913
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-117913 Not...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146877)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146877 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds i...
Rocky Linux 8 [CIQ] Security Update: libX11 / libX11-common / libX11-debuginfo / libX11-debugsource / etc (crlsa-2026_89730)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202689730 advisory. libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 Tenable has extracted the preceding description block directly from the CIQ securi...
Linux Distros Unpatched Vulnerability : CVE-2026-99155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146664)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146664 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdrbuftrim: clamp buf-len to avoid underflow xdrbuftrim trims len bytes from the tail of...
Linux Distros Unpatched Vulnerability : CVE-2026-117988
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,...
Linux Distros Unpatched Vulnerability : CVE-2026-117917
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...
Linux Distros Unpatched Vulnerability : CVE-2026-118345
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146666)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146666 advisory. In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes...
Linux Distros Unpatched Vulnerability : CVE-2026-116829
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b10398 before b11301 contains an integer overflow vulnerability in ggufinitfromreader that allows attackers to bypass tensor element-count validation ...
Linux Distros Unpatched Vulnerability : CVE-2026-117965
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
Linux Distros Unpatched Vulnerability : CVE-2026-117941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...
Oracle Business Intelligence Publisher (October 2026 CPU)
The 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI...
Linux Distros Unpatched Vulnerability : CVE-2026-117896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...
AlmaLinux 9.6 [TuxCare] Security Update: grafana-pcp Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793112759)
The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793112759 advisory. - A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then...
Rocky Linux 9.6 [CIQ] Security Update: unzip Multiple Vulnerabilities (ciqsa-2026_1726)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261726 advisory. This advisory aggregates security fixes for the unzip SRPM in CIQ LTS 9.6. It addresses 11 CVEs: CVE-2022-0529, CVE-2016-9844, CVE-2019-13232,...
Linux Distros Unpatched Vulnerability : CVE-2026-117880
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
AlmaLinux 9.2 [TuxCare] Security Update: perl-URI / perl-URI-tests (ALMALINUX9.2:CLSA-2026:1793228371)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793228371 advisory. - URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep...
Linux Distros Unpatched Vulnerability : CVE-2026-118357
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...
Linux Distros Unpatched Vulnerability : CVE-2026-99109
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: reject SetEA requests that do not fit the request buffer CIFSSMBSetEA copies the caller's extended attribute value into the SMB request buffer...