AlmaLinux 10 : grub2 (ALSA-2025:16154)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16154 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. CVE-2024-45776 grub2: fs/ufs: OOB write in the heap CVE-2024-45781 grub2:...

Fedora: Security Advisory (FEDORA-2025-402b80a0de)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RockyLinux 10 : grub2 (RLSA-2025:16154)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16154 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. CVE-2024-45776 grub2: fs/ufs: OOB write in the heap CVE-2024-45781 grub2:...

openSUSE Security Advisory (SUSE-SU-2025:03444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

curl-8.16.0-1.1 on GA media (moderate)

curl-8.16.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15590-1 Rating: moderate Cross-References: CVE-2025-10148 CVE-2025-9086 CVSS scores: CVE-2025-9086 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities c...

kubecolor-0.5.2-1.1 on GA media (moderate)

kubecolor-0.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15586-1 Rating: moderate Cross-References: CVE-2025-0913 CVE-2025-47906 CVSS scores: CVE-2025-0913 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2025-0913 SUSE : 6.8...

cJSON-devel-1.7.19-1.1 on GA media (moderate)

cJSON-devel-1.7.19-1.1 on GA media Announcement ID: openSUSE-SU-2025:15583-1 Rating: moderate Cross-References: CVE-2023-26819 CVE-2025-57052 CVSS scores: CVE-2023-26819 SUSE : 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-26819 SUSE : 2.1...

Important: kernel-livepatch-5.10.242-239.961

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak CVE-2025-38527 In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdiscdequeueinternal CVE-2025-39677 Affect...

PT-2025-39744

CVE-2025-56714 Cloud-Classroom-PHP-1.0 CVE-2025-56713 Poc 2 - POST /classrooms/loginlin... https://t.co/Dx3zpMS4OH Vulnerability Notification: https://t.co/xhLrNnfyrO...

SUSE SLES15 Security Update : kernel RT (Live Patch 2 for SLE 15 SP7) (SUSE-SU-2025:03318-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03318-1 advisory. This update for the Linux Kernel 6.4.0-15070078 fixes several issues. The following security issues were fixed: - CVE-2025-38498: dochangetype...

SUSE: Security Advisory (SUSE-SU-2025:03268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

govulncheck-vulndb-0.0.20250918T182144-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250918T182144-1.1 on GA media Announcement ID: openSUSE-SU-2025:15566-1 Rating: moderate Cross-References: CVE-2025-47906 CVE-2025-5187 CVSS scores: CVE-2025-47906 SUSE : 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2025-47906 SUSE : 2.1...

Security update for curl

This update for curl fixes the following issues: Security issues fixed: CVE-2025-9086: bug in patch comparison logic when processing cookies can lead to out-of-bounds read in heap buffer bsc1249191. CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server...

tkimg-2.1.0-1.1 on GA media (moderate)

tkimg-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15556-1 Rating: moderate Cross-References: CVE-2025-8851 CVE-2025-9165 CVSS scores: CVE-2025-8851 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-8851 SUSE : 4.8...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-2174)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-37990

Name of the Vulnerable Software and Affected Versions WatchGuard Firebox versions 12.0 through 12.11.2 Description A stored cross-site scripting XSS issue exists in the management interface of WatchGuard Fireware OS via the IPS module. This occurs due to improper neutralization of input during we...

Fedora 43 : exiv2 (2025-c23727e694)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c23727e694 advisory. Exiv2 0.28.6 + patch to fix silent abi breakage ---- Exiv2 v0.28.6 Fixes two low severity CVEs Tenable has extracted the preceding description block...

Fedora 43 : cups (2025-3596273b51)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3596273b51 advisory. 2.4.14 fixes CVE-2025-58060 and CVE-2025-58364 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...

chromedriver-140.0.7339.127-1.1 on GA media (moderate)

chromedriver-140.0.7339.127-1.1 on GA media Announcement ID: openSUSE-SU-2025:15548-1 Rating: moderate Cross-References: CVE-2025-10200 CVE-2025-10201 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0343-1 Rating: important References: 1249388 Cross-References: CVE-2025-10200 CVE-2025-10201 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes two vulnerabilities is now available...