27 matches found
MiracleLinux 9 : mingw-glib2-2.78.6-1.el9 (AXSA:2024-9231:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9231:02 advisory. glib2: Signal subscription vulnerabilities CVE-2024-34397 Tenable has extracted the preceding description block directly from the MiracleLinux security...
SUSE: Security Advisory (SUSE-SU-2025:21213-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for openssl-3 (important)
openSUSE security update: security update for openssl-3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025:20164-1 Rating: important References: bsc1250232 bsc1250233 bsc1250234 Cross-References: CVE-2025-9230 CVE-2025-9231 CVE-2025-9232 CVSS scores:...
Fedora: Security Advisory (FEDORA-2025-e6f76d56fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-c355a1291c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-9231 vulnerabilities
Vulnerabilities for packages: openssl...
[SECURITY] [DSA 6015-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6015-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 01, 2025 https://www.debian.org/security/faq -...
CVE-2025-9231
Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private...
BELL-CVE-2025-9231
Bulletin has no description...
CVE-2025-9231
creationtimestamp| type| source ---|---|--- 2025-09-30 22:26:09+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3m23kyhzcgk2z 2025-09-30 23:41:12+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m23p6r2cdo2d 2025-10-01 06:25:35+00:00| seen|...
USN-7786-1: OpenSSL vulnerabilities
Stanislav Fort discovered that OpenSSL incorrectly handled memory when trying to decrypt CMS messages encrypted with password-based encryption. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-9230 Stanislav Fort discovered that OpenSSL ha...
CVE-2025-9231
Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private...
MAL-2025-9231 Malicious code in @paysol-widgets/ts-client (npm)
The package @paysol-widgets/ts-client was found to contain malicious code...
CVE-2015-9231
iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new default feature was added to iTerm2 version 3.0.0 and unreleased 2.9.x versions such as 2.9.20150717 that resulted in a potential information disclosure. In an attempt to see whether the text under...
CVE-2024-9231
creationtimestamp| type| source ---|---|--- 2024-10-22 12:56:46+00:00| seen| https://t.me/cvedetector/8604...
CVE-2024-9231
The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.4.9.5. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-9231 WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scripting
The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.4.9.5. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2015-9231
CVE-2015-9231 affects iTerm2 3.x prior to 3.1.1. A default feature introduced in iTerm2 3.0.0 caused the text under the cursor (or selection) to be sent as unencrypted DNS queries when checking if it was a URL, potentially disclosing passwords and other sensitive data over the network. Public ent...
