SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2026:3048-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3048-1 advisory. This update for container-suseconnect rebuilds it against the current go security release. Tenable has extracted the preceding description...

better-lambda-deploy (>=0.0.4, <=0.2.1) potentially affected by CVE-2025-3048 via aws-sam-cli (0.40.0)

aws-sam-cli PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.0.4, =0.2.1 Source cves: CVE-2025-3048 Source advisory: OSV:PYSEC-2026-1206...

better-lambda-deploy (>=0.2.2, <=0.5.9) potentially affected by CVE-2025-3048 via aws-sam-cli (0.41.0)

aws-sam-cli PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.2.2, =0.5.9 Source cves: CVE-2025-3048 Source advisory: OSV:PYSEC-2026-1206...

tc-sam-cli (0.0.11) potentially affected by CVE-2025-3048 via aws-sam-cli (0.22.0)

aws-sam-cli PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.11 Source cves: CVE-2025-3048 Source advisory: OSV:PYSEC-2026-1206...

CVE-2026-3048 Nexus Repository 3 - Improper LDAP Referral Handling

An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server...

MiracleLinux 4 : libpng-1.2.49-1.AXS4 (AXSA:2012-541:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-541:03 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphic...

MiracleLinux 3 : libpng-1.2.10-17.0.1.AXS3 (AXSA:2012-642:03)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-642:03 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphic...

CVE-2010-3048

Cisco Unified Personal Communicator 7.0 1.13056 does not free allocated memory for received data and does not perform validation if memory allocation is successful, causing a remote denial of service condition...

CVE-2025-3048

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

tc-sam-cli (0.0.12) potentially affected by CVE-2025-3048 via aws-sam-cli (0.37.0)

aws-sam-cli PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.12 Source cves: CVE-2025-3048 Source advisory: OSV:GHSA-PP64-WJ43-XQCR...

tc-sam-cli (0.0.11) potentially affected by CVE-2025-3048 via aws-sam-cli (0.22.0)

aws-sam-cli PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.11 Source cves: CVE-2025-3048 Source advisory: OSV:GHSA-PP64-WJ43-XQCR...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by CVE-2025-3048 via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: CVE-2025-3048 Source advisory: GHSA-PP64-WJ43-XQCR...

AWS SAM CLI Path Traversal allows file copy to local cache

Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. After completing a build with AWS SAM CLI which include symlinks, the content o...

CVE-2025-3048

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

CVE-2025-3048

creationtimestamp| type| source ---|---|--- 2025-03-31 15:31:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9675 2025-03-31 16:40:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258034481176074 2025-03-31 16:40:47+00:00| seen|...

CVE-2025-3048

CVE-2025-3048 concerns AWS SAM CLI. When building with Docker (--use-container) and symlinks are included, the content of those symlinks can be copied into the SAM CLI cache as regular files/directories, potentially exposing privileged host files to users within the local workspace. This affects ...

CVE-2025-3048 Path Traversal in AWS SAM CLI allows file copy to local cache

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

CVE-2025-3048 Path Traversal in AWS SAM CLI allows file copy to local cache

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

better-lambda-deploy (>=0.0.4, <=0.8.5), localambda (0.0.1) +1 more potentially affected by CVE-2025-3048 via aws-sam-cli (>=0.17.0, <=1.38.1)

aws-sam-cli PYPI version =0.17.0, =0.0.4, =0.0.7, =0.0.12 Source cves: CVE-2025-3048 Source advisory: MEND:CVE-2025-3048...

Huawei EulerOS: Security Advisory for syslinux (EulerOS-SA-2024-2839)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...