OpenSCAP Libraries 1.4.3

The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...

CVE-2025-13136

creationtimestamp| type| source ---|---|--- 2025-11-22 09:19:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m67hqdgiui2k...

AZL-70660 CVE-2025-40210 affecting package kernel for versions less than 6.6.112-1

In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...

CVE-2025-64767

creationtimestamp| type| source ---|---|--- 2025-11-19 22:23:43+00:00| published-proof-of-concept| https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4 2025-11-21 19:52:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m662o4dcbv2q 2025-11-22 01:34:02+00:00|...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46724)

drm/amdgpu: vulnerability in drm/amdgpu that involved an out-of-bounds read of dfv17channelnumber. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Fedora: Security Advisory (FEDORA-2025-daa6238745)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2025-12765

pgAdmin = 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification...

PT-2025-46787

🟠 Parse Server, Information Disclosure, CVE-2023-43605 Medium https://t.co/5zLHiihOZO...

CVE-2025-13058

A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The patch is identified as...

DEBIAN-CVE-2025-40162

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdwutils: avoid NULL deref when devmkasprintf fails devmkasprintf may return NULL on memory allocation failure, but the debug message prints cpus-dainame before checking it. Move the devdbg call after the NULL check to...

CVE-2025-40127

In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...

DEBIAN-CVE-2025-13020

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-11697

creationtimestamp| type| source ---|---|--- 2025-11-11 16:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ejqkfm362x 2025-11-11 17:41:16+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eomab2j2z2 2025-11-11 18:10:19+00:00| seen|...

DEBIAN-CVE-2025-12725

Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2025-12434

Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-27917

creationtimestamp| type| source ---|---|--- 2025-11-06 17:28:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115503931619214286...

CVE-2025-58317

creationtimestamp| type| source ---|---|--- 2025-11-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-03...

Fedora 42 : xorg-x11-server-Xwayland (2025-6f416148b4)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6f416148b4 advisory. Update to xwayland 24.1.9, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231 Tenable has extracted the preceding description block directl...

CVE-2024-13992

creationtimestamp| type| source ---|---|--- 2025-10-31 14:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4iowrzxqc2a...

CVE-2025-12428

creationtimestamp| type| source ---|---|--- 2025-10-31 12:42:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4iirfkxdve2 2025-11-03 09:41:18+00:00| seen| https://sploitus.com/exploit?id=B18F2908-9E33-54D9-90DC-4003F6224CE7 2025-11-03...