MiracleLinux 7 : firefox-45.6.0-1.0.1.el7.AXS7 (AXSA:2016-1195:10)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-1195:10 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this...

MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.71-2.5.3.1.AXS4 (AXSA:2014-593:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-593:04 advisory. Description : The OpenJDK runtime environment. Security issues fixed with this release: CVE-2014-6457 CVE-2014-6502 CVE-2014-6504 CVE-2014-6506...

MiracleLinux 8 : thunderbird-128.13.0-3.el8_10.ML.1 (AXSA:2025-10749:19)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10749:19 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035...

SUSE-SU-2026:0037-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251230T014957 2025-12-30T01:49:57Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-4249 CVE-2025-68120 CVE-2025-68120 GO-2025-4254 CVE-2025-62190 GHSA-gmx5-frv9-9m9f...

PT-2026-1064

Name of the Vulnerable Software and Affected Versions parisneo/lollms versions prior to 2.2.0 Description A Server-Side Request Forgery SSRF issue exists in the /api/files/export-content endpoint. The download image to temp function in backend/routers/files.py does not properly validate...

SUSE SLES15 : Security update 4.3.16.2 for Multi-Linux Manager Server LTS (SUSE-SU-2025:4479-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4479-1 advisory. release-notes-susemanager: - Update to SUSE Manager 4.3.16.2 SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled CVEs Fixed:...

Fedora 43 : xorg-x11-server (2025-df25db07fb)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-df25db07fb advisory. Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231 Tenable has extracted the preceding description block directl...

Moderate: Red Hat Security Advisory: mariadb:10.5 security update

An update for the mariadb:10.5 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Fedora 43 : openbao (2025-0687b2debc)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0687b2debc advisory. Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705. Tenable has extracted the preceding description block directly from...

Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in Spring boot and Spring Security

Summary IBM Sterling Control Center is affected by vulnerabilities in Spring boot and Spring Security CVE-2025-22235, CVE-2025-22228 and CVE-2024-38821 Vulnerability Details CVEID:CVE-2025-22235 DESCRIPTION: EndpointRequest.to creates a matcher for null/ if the actuator endpoint, for which the...

SUSE SLES15 Security Update : kernel RT (Live Patch 14 for SLE 15 SP6) (SUSE-SU-2025:03643-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03643-1 advisory. This update for the Linux Kernel 6.4.0-1506001049 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter:...

Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059179 fixes several issues. The following security issues were fixed: CVE-2025-38499: cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns bsc1248673. CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414632 advisory. Rogue backends can cause DoS of guests via high frequency events This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilitie...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to extraction filter issues due to the python package (CVE-2025-4330, CVE-2025-4435)

Summary Python is used by DataStage on Cloud Pak for Data as part of general processing functionality. Vulnerability Details CVEID:CVE-2025-4330 DESCRIPTION: Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of so...

USN-7721-1 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PA-RISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x...

CLSA-2025-1753209568 python3: Fix of 5 CVEs

CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses filter="tar"/filter="data"...

USN-7608-4 linux-aws-5.15, linux-intel-iot-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - Network traffic control; CVE-2025-37890...

CVE-2022-50046

In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix potential memory leaks in rpcsysfsxprtstatechange The issue happens on some error handling paths. When the function fails to grab the object xprt, it simply returns 0, forgetting to decrease the reference count of...

CVE-2022-4846

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

SUSE-SU-2025:1195-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF bsc1237918. - CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238919. -...