Linux Distros Unpatched Vulnerability : CVE-2023-22997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the modulegetnextpage return value expects it to be NULL in the error case, whereas i...

Linux Distros Unpatched Vulnerability : CVE-2022-25278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should no...

Linux Distros Unpatched Vulnerability : CVE-2023-31250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they...

Linux Distros Unpatched Vulnerability : CVE-2022-37609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js. CVE-2022-37609 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2025-38371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/v3d: Disable interrupts before resetting the GPU Currently, an interrupt can be triggered during a GPU reset, which can lead to GPU hangs and NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2023-53066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info returned by the helper is valid before using it. Found by Linux...

Linux Distros Unpatched Vulnerability : CVE-2025-37766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greater than UINTMAX/8, division by zero is possible. Found by Linux...

Linux Distros Unpatched Vulnerability : CVE-2024-5700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume th...

Linux Distros Unpatched Vulnerability : CVE-2020-10573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Janus through 0.9.1. janusaudiobridge.c has a double mutex unlock when listing private rooms in AudioBridge. CVE-2020-10573 Note that...

Linux Distros Unpatched Vulnerability : CVE-2020-13143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gadgetdevdescUDCstore in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an...

Linux Distros Unpatched Vulnerability : CVE-2020-15665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. This could have resulted in an incorrect...

Photon OS 4.0: Linux PHSA-2025-4.0-0834

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0834. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

NewStart CGSL MAIN 7.02 : util-linux Vulnerability (NS-SA-2025-0198)

The remote NewStart CGSL host, running version MAIN 7.02, has util-linux packages installed that are affected by a vulnerability: - wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically...

Photon OS 4.0: Kafka PHSA-2025-4.0-0834

An update of the kafka package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0834. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 42 : python-asteval (2025-83c141f000)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-83c141f000 advisory. Fix CVE-2025-24359 closes rhbz2341976 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

PT-2025-30051 · Melange · Melange

Name of the Vulnerable Software and Affected Versions: melange versions 0.23.0 through 0.29.4 Description: melange allows users to build apk packages using declarative pipelines. SBOM files generated by melange in apks had file system permissions mode 666, potentially allowing an unprivileged use...

JetBrains YouTrack < 2024.3.85077 / 2025.x < 2025.1.86199 Email Spoofing

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.85077, 2025.x prior to 2025.1.86199. It is, therefore, affected by an email spoofing vulnerability via the Administrative API. Note that Nessus has not tested for these issues but has instead relied only on the...

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server, related to the lack of data encryption measures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server is related to the lack of data encryption measures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-083)

The version of kernel installed on the remote host is prior to 5.15.59-33.133. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.15-2025-083 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before...

Cleartext Storage of Sensitive Information

Overview org.jenkins-ci.plugins:aqua-security-scanner is a Jenkins plugin for calling the Aqua API to scan a Docker image Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the storage of Scanner Tokens for Aqua API in config.xml files on the...