Fedora 43 : rust-matchers / rust-tracing-subscriber (2025-289b34020a)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-289b34020a advisory. - Update the tracing-subscriber crate to version 0.3.20. - Update the matchers crate to version 0.2.0. This update also includes a fix for CVE-2025-58160...

Fedora 42 : rust-secret-service / uv (2025-d757bc292e)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-d757bc292e advisory. Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust-tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43...

Fedora 43 : bustle (2025-4b143118b8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4b143118b8 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : ruff (2025-91981ea84d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-91981ea84d advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : rust-monitord / rust-monitord-exporter (2025-7b8fe5b994)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-7b8fe5b994 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 43 : python-uv-build / rust-secret-service / uv (2025-5acdf83593)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-5acdf83593 advisory. Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust-tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43...

Fedora 41 : ruff (2025-5ba89a2c48)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5ba89a2c48 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : rust-crypto-auditing-agent / rust-crypto-auditing-client / etc (2025-b6f15a721e)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-b6f15a721e advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 42 : ruff (2025-a8501d6717)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a8501d6717 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : tuigreet (2025-df23dd806a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-df23dd806a advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : rust-busd (2025-f4e467b889)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f4e467b889 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2025-9018

The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ttupdatetablefunction' and 'ttdeleterecordfunction' functions in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers...

CVE-2025-9018

CVE-2025-9018 affects the WordPress Time Tracker plugin up to version 3.1.0. The root cause is a missing capability check in the functions tt_update_table_function and tt_delete_record_function, enabling authenticated users with Subscriber-level access and above to modify options (e.g., user regi...

CVE-2025-9018 Time Tracker <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Limited Data Deletion

The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ttupdatetablefunction' and 'ttdeleterecordfunction' functions in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers...

CVE-2025-9018 Time Tracker <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Limited Data Deletion

The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ttupdatetablefunction' and 'ttdeleterecordfunction' functions in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers...

CVE-2025-9693

The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the postInsertUserProcess function in all versions up to, and including, 3.1.2. This makes it possible for authenticated...

CVE-2025-8423

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mtswptremoveplugin and ajaxupdateexportcode functions in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with...

CVE-2025-8425

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajaximportstrings function in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with...

CVE-2025-8425 My WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajaximportstrings function in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with...

CVE-2025-9693

CVE-2025-9693 covers the WordPress plugin User Meta – User Profile Builder and User management plugin with a vulnerability in postInsertUserProcess that allows an authenticated user (Subscriber or higher) to delete arbitrary files due to insufficient file path validation. Affected versions are al...