Siemens Tecnomatix Plant Simulation

SUMMARY Siemens Tecnomatix Plant Simulation do not properly limit the access of the simulation model to the filesystem. This could allow an unauthorized attacker to read or delete arbitrary files or the entire filesystem of the device. Siemens has released new versions for the affected products...

About the security content of visionOS 2.3.2

About the security content of visionOS 2.3.2 This document describes the security content of visionOS 2.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Security Updates for Microsoft Word Products (March 2025)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

RHEL 8 / 9 : Satellite 6.16.3 Async Update (Moderate) (RHSA-2025:2399)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2399 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessit...

Photon OS 5.0: Gettext PHSA-2025-5.0-0485

An update of the gettext package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0485. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Gettext PHSA-2025-4.0-0765

An update of the gettext package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0765. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Wireshark PHSA-2025-4.0-0762

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Rubygem PHSA-2025-5.0-0485

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0485. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 41 : podman-tui (2025-736781dc2a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-736781dc2a advisory. release 1.4.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: HID: core: zero-initialize the report buffer CVE-2024-50302 kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extig...

Fedora 41 : firefox (2025-60c0e24d76)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-60c0e24d76 advisory. - Updated to latest upstream 136.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

electron33 -- multiple vulnerabilities

Electron develpers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2025-0445. Security: backported fix for CVE-2025-0995. Security: backported fix for CVE-2025-0998...

RUSTSEC-2025-0010 Versions of *ring* prior to 0.17 are unmaintained.

ring 0.16.20 was released over 4 years ago and isn't maintained, tested, etc. Additionally, the project's general policy is to only patch the latest release, which is 0.17.12 now. It will be difficult for anybody to backport future fixes to versions earlier than 0.17.10 due to license changes...

CVE-2025-1917

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6482 2025-03-05 06:04:07+00:00| seen| https://t.me/cvedetector/19579 2025-03-05 07:19:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv4iuta22 2025-03-11...

CVE-2025-1919

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6480 2025-03-05 06:04:12+00:00| seen| https://t.me/cvedetector/19581 2025-03-05 07:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv6ih522e 2025-03-06...

Linux Distros Unpatched Vulnerability : CVE-2022-46165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync maliciou...

Fedora 41 : fscrypt (2025-fc7c0ca5c5)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-fc7c0ca5c5 advisory. Update to 0.3.5 to fix FTBFS and test failures Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2025-27111 Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This vulnerability is fixed...

CVE-2025-1933

On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

Linux Distros Unpatched Vulnerability : CVE-2020-1472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the...