44999 matches found
CVE-2025-61911: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...
Debian: Security Advisory (DSA-6021-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:03500-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AZL-68331 CVE-2025-39957 affecting package kernel for versions less than 6.6.112.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: increase scanieslen for S1G Currently the S1G capability element is not taken into account for the scanieslen, which leads to a buffer length validation failure in ieee80211prephwscan and subsequent WARN in...
CVE-2025-46818 affecting package valkey for versions less than 8.0.6-1
CVE-2025-46818 affecting package valkey for versions less than 8.0.6-1. A patched version of the package is available...
CVE-2025-46819 affecting package valkey for versions less than 8.0.6-1
CVE-2025-46819 affecting package valkey for versions less than 8.0.6-1. A patched version of the package is available...
Barco ClickShare Devices Cross-site Scripting (CVE-2016-3150)
Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...
Barco ClickShare Devices Arbitrary Code Execution (CVE-2016-3149)
Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
DLA-4325-1 redis - security update
Bulletin has no description...
DSA-6021-1 chromium - security update
Bulletin has no description...
Ubuntu: Security Advisory (USN-7810-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7807-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-4324-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:03462-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Barco ClickShare Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2016-3152)
Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
Fedora 41 : ibus-bamboo (2025-e3f99bf558)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e3f99bf558 advisory. Rebuild with golang-1.24.7-1.fc41 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CVE-2025-49844 affecting package redis for versions less than 6.2.20-1
CVE-2025-49844 affecting package redis for versions less than 6.2.20-1. An upgraded version of the package is available that resolves this issue...
Fedora 44 : moby-engine (2025-a870881eff)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a870881eff advisory. Automatic update for moby-engine-28.5.1-1.fc44. Changelog Wed Oct 8 2025 Bradley G Smith - 28.5.1-1 - Update to release v28.5.1 - Resolves: rhbz2401164,...
AZL-76422 CVE-2023-53673 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: call disconnect callback before deleting conn In hcicsdisconnect, we do hciconndel even if disconnection failed. ISO, L2CAP and SCO connections refer to the hciconn without hciconnget, so disconncfm must be...
