Fedora 41 : moodle (2025-d50e995e7d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d50e995e7d advisory. 4.4.11 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Atlassian Jira 9.12.x < 9.12.28 Path Traversal

According to its self-reported version number, the Atlassian Jira application running on the remote host is 9.12.x prior to 9.12.28, 10.3.x prior to 10.3.12 or 11.x prior to 11.1.0. It is, therefore, affected by a path traversal vulnerability. Note that the scanner has not tested for these issues...

Atlassian Confluence 9.2.x < 9.2.7 Denial of Service

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 2.x prior to 8.5.25, 9.2.x prior to 9.2.7 or 10.x prior to 10.0.2. It is, therefore, affected by a denial of service vulnerability. Note that the scanner has not tested for these issu...

Atlassian Jira 10.3.x < 10.3.12 Path Traversal

According to its self-reported version number, the Atlassian Jira application running on the remote host is 9.12.x prior to 9.12.28, 10.3.x prior to 10.3.12 or 11.x prior to 11.1.0. It is, therefore, affected by a path traversal vulnerability. Note that the scanner has not tested for these issues...

Security Updates for Microsoft Visio Products C2R (October 2025)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by a remote code execution vulnerability that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relied on...

AlmaLinux 9 : .NET 8.0 (ALSA-2025:18149)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18149 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial of...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (October 2025)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by a vulnerability where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2025-61454

creationtimestamp| type| source ---|---|--- 2025-10-14 21:00:05+00:00| published-proof-of-concept| Telegram/e-NDV7JUXFjV7ZYm9JMRokEu-SU9MarRYVSx0rnLWFHt3U 2025-10-20 15:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3n4iy2nng2o 2025-10-22 21:02:35+00:00| seen|...

CVE-2025-6985

creationtimestamp| type| source ---|---|--- 2025-10-14 04:36:10+00:00| seen| https://t.me/bhhub/1168 2026-07-26 07:01:47+00:00| seen| https://t.me/zhatez/2283 2026-07-27 00:01:31+00:00| seen| https://t.me/zhatez/2283 2026-07-28 23:00:04+00:00| seen| https://t.me/zhatez/2283 2026-07-29...

EUVD-2016-10339

Malware in sbrugna...

Grafana 12.1.x < 12.1.2 Multiples Vulnerabilities

According to its self-reported version, the Grafana install hosted on the remote host is prior to 11.3.8, or 11.4.x prior to 11.4.6, or 11.5.x prior to 11.5.6, or 11.6.x prior to 11.6.3, or 12.0.x prior to 12.0.2, or 12.1.x prior to 12.1.2. It is, therefore, affected by multiples vulnerabilities....

Grafana 11.4.x < 11.4.6 Multiples Vulnerabilities

According to its self-reported version, the Grafana install hosted on the remote host is prior to 11.3.8, or 11.4.x prior to 11.4.6, or 11.5.x prior to 11.5.6, or 11.6.x prior to 11.6.3, or 12.0.x prior to 12.0.2, or 12.1.x prior to 12.1.2. It is, therefore, affected by multiples vulnerabilities....

EUVD-2025-5254

Malicious code in bioql PyPI...

CVE-2025-58775

creationtimestamp| type| source ---|---|--- 2025-10-02 06:04:14+00:00| seen| Telegram/BwsrwyFRjJnrX520whsfwM9iuGfUywjZCoBkzu1nWBF5w...

RHSA-2024:4619

creationtimestamp| type| source ---|---|--- 2025-10-01 09:00:27+00:00| seen| Telegram/-h2tA7k5LBgvws531-LzQjYT1zC4XZfun-87EvnaObsJ2E...

RHSA-2024:1883

creationtimestamp| type| source ---|---|--- 2025-10-01 09:00:19+00:00| seen| Telegram/HOI9RhqBej92SEDYPeYOufaX9SS-ALTRn7qub0MNpF0T4 2025-10-01 09:00:21+00:00| seen| Telegram/T18PCyJX5gS6gcDXW3dVGKsiGFXlCyqv6FilSSHPuh1hqZ4 2025-10-01 09:00:22+00:00| seen|...

Fedora 42 : firebird (2025-d24499a627)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d24499a627 advisory. 4.0.6.3221 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for the...

Cisco SD-WAN vEdge Software Access Control List Bypass (cisco-sa-defaultacl-pSJk9nVF)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Dotnetnuke < 10.1.0 Stored Cross-Site Scripting (XSS) in Prompt module (CVE-2025-59545)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.1.0. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Fedora 41 : gh (2025-24e111e6f1)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-24e111e6f1 advisory. Update to 2.79.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...