PT-2025-32052 · Kenwood · Kenwood Dmx958Xr

Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices without authentication. The flaw resides in the...

PT-2025-32064 · Kenwood · Kenwood Dmx958Xr

Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected devices. Authentication is not required for exploitation. The flaw resides in the firmware upda...

(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware update process. The issue results from the lack of...

RockyLinux 8 : .NET 8.0 (RLSA-2025:7589)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7589 advisory. dotnet: .NET and Visual Studio Spoofing Vulnerability CVE-2025-26646 Tenable has extracted the preceding description block directly from the RockyLinux security...

python-setuptools security update

An update is available for python-setuptools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

PT-2025-30953

Name of the Vulnerable Software and Affected Versions: tj-actions/branch-names versions 8.2.1 and below Description: A critical command injection vulnerability exists in the tj-actions/branch-names GitHub Action workflow. This flaw stems from inconsistent input sanitization and unescaped output,...

Debian: Security Advisory (DLA-4242-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-30175 · Metacrm · Metacrm

Name of the Vulnerable Software and Affected Versions: MetaCRM versions up to 6.4.2 Description: A critical issue exists in MetaCRM due to a SQL injection vulnerability within the mcc login.jsp file. The workerid argument can be manipulated to exploit this issue, allowing for remote attacks. The...

AlmaLinux 8 : microcode_ctl (ALSA-2025:10991)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:10991 advisory. microcodectl: From CVEorg collector CVE-2024-28956 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...

Fedora 42 : python-requests (2025-87207b946a)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-87207b946a advisory. - Update to 2.32.4 - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs Tenable has extracted the preceding description block direct...

CVE-2025-37998 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37998 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-46712 affecting package erlang for versions less than 25.3.2.21-1

CVE-2025-46712 affecting package erlang for versions less than 25.3.2.21-1. An upgraded version of the package is available that resolves this issue...

AlmaLinux 8 : container-tools:rhel8 (ALSA-2025:10551)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:10551 advisory. podman: podman missing TLS verification CVE-2025-6032 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note th...

CVE-2025-47984

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-11-02 17:01:46+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3m4nyavvvtu2u 2025-11-03 08:27:34+00:00| seen|...

CVE-2025-49666

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...

CVE-2025-49697

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:08:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti45jrc2e2o 2025-07-08 22:53:33+00:00| seen|...

CVE-2025-49724

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti4j3tvvt27...

CVE-2025-47999

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...

Windows Update Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...

Moderate: python-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...