Lucee 5.4.x < 5.4.3.2 Remote Code Execution

According to its self-reported version number, Lodash is prior to 5.3.12.1 or 5.4.x prior to 5.4.3.2. It is, therefore, affected by a Remote Code Execution via an XML XXE attack in the Lucee REST endpoint. Note that the scanner has not tested for these issues but has instead relied only on the...

CVE-2025-64710

creationtimestamp| type| source ---|---|--- 2025-11-13 02:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i5yhq24m2s 2025-11-13 04:25:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5id3xx4lyy2...

Google Chrome < 142.0.7444.162 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.162. It is, therefore, affected by a vulnerability as referenced in the 202511stable-channel-update-for-desktop11 advisory. - Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowe...

chromium -- security fix

Chrome Releases reports: This update includes 1 security fix: 457351015 High CVE-2025-13042: Inappropriate implementation in V8. Reported by 303f06e3 on 2025-11-03...

CVE-2025-11987

creationtimestamp| type| source ---|---|--- 2025-11-05 12:27:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4v2dxvmim2a 2025-11-05 13:00:53+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4v4676wknb2...

Fedora 41 : moodle (2025-d50e995e7d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d50e995e7d advisory. 4.4.11 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Atlassian Jira 9.12.x < 9.12.28 Path Traversal

According to its self-reported version number, the Atlassian Jira application running on the remote host is 9.12.x prior to 9.12.28, 10.3.x prior to 10.3.12 or 11.x prior to 11.1.0. It is, therefore, affected by a path traversal vulnerability. Note that the scanner has not tested for these issues...

Atlassian Jira 10.3.x < 10.3.12 Path Traversal

According to its self-reported version number, the Atlassian Jira application running on the remote host is 9.12.x prior to 9.12.28, 10.3.x prior to 10.3.12 or 11.x prior to 11.1.0. It is, therefore, affected by a path traversal vulnerability. Note that the scanner has not tested for these issues...

Atlassian Confluence 9.2.x < 9.2.7 Denial of Service

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 2.x prior to 8.5.25, 9.2.x prior to 9.2.7 or 10.x prior to 10.0.2. It is, therefore, affected by a denial of service vulnerability. Note that the scanner has not tested for these issu...

Security Updates for Microsoft Visio Products C2R (October 2025)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by a remote code execution vulnerability that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relied on...

AlmaLinux 9 : .NET 8.0 (ALSA-2025:18149)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18149 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial of...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (October 2025)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by a vulnerability where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2025-61454

creationtimestamp| type| source ---|---|--- 2025-10-14 21:00:05+00:00| published-proof-of-concept| Telegram/e-NDV7JUXFjV7ZYm9JMRokEu-SU9MarRYVSx0rnLWFHt3U 2025-10-20 15:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3n4iy2nng2o 2025-10-22 21:02:35+00:00| seen|...

CVE-2025-6985

creationtimestamp| type| source ---|---|--- 2025-10-14 04:36:10+00:00| seen| https://t.me/bhhub/1168...

EUVD-2016-10339

Malware in sbrugna...

Grafana 11.4.x < 11.4.6 Multiples Vulnerabilities

According to its self-reported version, the Grafana install hosted on the remote host is prior to 11.3.8, or 11.4.x prior to 11.4.6, or 11.5.x prior to 11.5.6, or 11.6.x prior to 11.6.3, or 12.0.x prior to 12.0.2, or 12.1.x prior to 12.1.2. It is, therefore, affected by multiples vulnerabilities....

Grafana 12.1.x < 12.1.2 Multiples Vulnerabilities

According to its self-reported version, the Grafana install hosted on the remote host is prior to 11.3.8, or 11.4.x prior to 11.4.6, or 11.5.x prior to 11.5.6, or 11.6.x prior to 11.6.3, or 12.0.x prior to 12.0.2, or 12.1.x prior to 12.1.2. It is, therefore, affected by multiples vulnerabilities....

EUVD-2025-5254

Malicious code in bioql PyPI...

CVE-2025-58775

creationtimestamp| type| source ---|---|--- 2025-10-02 06:04:14+00:00| seen| Telegram/BwsrwyFRjJnrX520whsfwM9iuGfUywjZCoBkzu1nWBF5w...

RHSA-2024:4619

creationtimestamp| type| source ---|---|--- 2025-10-01 09:00:27+00:00| seen| Telegram/-h2tA7k5LBgvws531-LzQjYT1zC4XZfun-87EvnaObsJ2E...