Fedora 43 : Thunar (2025-7a1a0e5bd8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7a1a0e5bd8 advisory. Update to 4.20.6, the latest stable bugfix release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

PT-2025-44862

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 Description A flaw exists due to insufficient data redaction in logging mechanisms. This could allow an application to access sensitive user data. Recommendations Update to iOS version...

PT-2025-44863

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 Safari versions prior to 26.1 visionOS versions prior to 26.1 Description A flaw exists due to improper state management. Processing specially designed web...

PT-2025-44864

Name of the Vulnerable Software and Affected Versions WebKit versions prior to 18.7.2 Description A buffer overflow exists in the WebKit web page rendering module of iOS and iPadOS. This issue is due to insufficient bounds checking when processing data. Successful exploitation could allow a remot...

PT-2025-44869

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 watchOS versions prior to 26.1 Safari versions prior to 26.1 visionOS versions prior to 26.1 Description A use-after-free issue existed due to improper memory management. Processing...

PT-2025-50993

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to access protected user data due to insufficient validation of symlinks. Recommendations Update to macOS version 26.1 or later...

PT-2025-50997

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to obtain elevated privileges, specifically root access. The issue was resolved through enhanced security checks. Recommendations Update to version 26.1 or later...

MINI-25MH-F4VR-96PR

Bulletin has no description...

MINI-PWV5-GF25-P2P5

Bulletin has no description...

EUVD-2025-37431

The kallyas theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 4.23.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-22046

creationtimestamp| type| source ---|---|--- 2025-10-31 20:57:37+00:00| seen| Telegram/lnHOJC0WHaL9FfDxaV1qNcZNom0a6mbwcnf711WBIsEE...

CVE-2025-3356

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view, overwrite, or append to arbitrary files on the system...

Impact Of CVE-2025-55752 And CVE-2025-55754 On EPMM, Sentry, Connector

Last Modified Date Oct 31, 2025 3:15:00 PM...

CVE-2022-50585

creationtimestamp| type| source ---|---|--- 2025-10-31 14:55:18+00:00| seen| Telegram/ixl2blQGt5NCej39GZvtCOfIe1N9SFZgdl1oPswDSRDrM...

BELL-CVE-2025-40100

Bulletin has no description...

PT-2025-44617

Name of the Vulnerable Software and Affected Versions Stylemix MasterStudy LMS versions prior to 3.6.28 Description A flaw exists in Stylemix MasterStudy LMS that allows for Blind SQL Injection due to improper neutralization of special elements within SQL commands. This issue potentially allows...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2025-988622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988622 advisory. Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free write vulnerability has been detected in versions Poppler...

Important Photon OS Security Update - PHSA-2025-4.0-0896

Updates of 'openjdk21', 'linux', 'openjdk11' packages of Photon OS have been released...

FreeBSD : chromium -- multiple security fixes (7c09fcb7-b5d6-11f0-b3f7-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7c09fcb7-b5d6-11f0-b3f7-a8a1599412c6 advisory. Chrome Releases reports: This update includes 20 security fixes: Tenable has extracted the...

Security Bulletin: IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations

Summary The KT1 component of ITM/ITCAM Agents, hereafter referred to as simply Agents, provides the ability to read from and write to the local file system. This facility is utilised by features such as SDA, Self-Describing Agent, which ensures that updates to a product's application support file...