Fedora 42 : python-requests (2025-87207b946a)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-87207b946a advisory. - Update to 2.32.4 - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs Tenable has extracted the preceding description block direct...

CVE-2025-37998 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37998 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-46712 affecting package erlang for versions less than 25.3.2.21-1

CVE-2025-46712 affecting package erlang for versions less than 25.3.2.21-1. An upgraded version of the package is available that resolves this issue...

AlmaLinux 8 : container-tools:rhel8 (ALSA-2025:10551)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:10551 advisory. podman: podman missing TLS verification CVE-2025-6032 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note th...

CVE-2025-49724

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti4j3tvvt27...

CVE-2025-49666

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...

CVE-2025-47984

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-11-02 17:01:46+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3m4nyavvvtu2u 2025-11-03 08:27:34+00:00| seen|...

CVE-2025-47999

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...

CVE-2025-49697

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:08:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti45jrc2e2o 2025-07-08 22:53:33+00:00| seen|...

Windows Update Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...

Moderate: python-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

jupyter-bqplot-jupyterlab-0.5.44-10.1 on GA media (moderate)

jupyter-bqplot-jupyterlab-0.5.44-10.1 on GA media Announcement ID: openSUSE-SU-2025:15269-1 Rating: moderate Cross-References: CVE-2025-5889 CVSS scores: CVE-2025-5889 SUSE : 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-5889 SUSE : 2...

CVE-2025-3848

The Download Manager and Payment Form WordPress Plugin – WP SmartPay plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 1.1.0 to 2.7.13. This is due to the plugin not properly validating a user's identity prior to updating their email through the update...

AlmaLinux 9 : python3.12 (ALSA-2025:7107)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7107 advisory. python: cpython: URL parser allowed square brackets in domain names CVE-2025-0938 Tenable has extracted the preceding description block directly from the AlmaLinux...

AlmaLinux 8 : container-tools:rhel8 (ALSA-2025:9142)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9142 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fro...

AlmaLinux 8 : pam (ALSA-2025:10027)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:10027 advisory. linux-pam: Linux-pam directory Traversal CVE-2025-6020 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note...

openSUSE Security Advisory (SUSE-SU-2025:02122-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5832

Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...

CVE-2025-5832

Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...

CVE-2025-5832

Pioneer DMH-WT7600NEX Software Update Signing insufficient verification of data authenticity is documented as a vulnerability. The flaw lies in the software update verification process where data in the update is not fully validated, allowing a physically present attacker to execute arbitrary cod...