Fedora 41 : prometheus-podman-exporter (2025-b0915f0a19)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b0915f0a19 advisory. release v1.16.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

openSUSE Security Advisory (SUSE-SU-2025:1334-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5906-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 5.0: Mozjs PHSA-2025-5.0-0504

An update of the mozjs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0504. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-17303 · Unknown · Electrolink 500W

Name of the Vulnerable Software and Affected Versions: Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web versions v01.07 through v01.09 Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Display versions v1.2 through v1.4 Description: A credential exposure issue allows unauthorized attackers t...

PT-2025-17288

Name of the Vulnerable Software and Affected Versions ASUS AiCloud affected versions not specified Description A critical authentication control issue exists in ASUS AiCloud, potentially allowing attackers to bypass authentication and execute unauthorized functions on affected devices remotely. T...

SUSE SLES15: spacewalk-java / spacewalk-java-config / spacewalk-java-lib / etc (SUSE-SU-2025:1321-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:1321-1 advisory. spacewalk-java: - Version 4.3.85-0: CVE-2025-23392: Filter user input in systems list page. bsc1239826 Tenable has extracted the preceding description...

Important: golang

Issue Overview: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635. CVE-2024-34156 Affected Packages: golang Issue Correction: Run yum update golang or yum update --advisory ALAS-2025-1971 to...

Important: libxslt

Issue Overview: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2024-55549 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored...

PT-2025-17207 · Unknown · Litepubl Cms

Name of the Vulnerable Software and Affected Versions: Litepubl CMS versions 7.0.9 and earlier Description: The issue allows for remote code execution RCE in the admin/service/run endpoint. No information is provided about the estimated number of potentially affected devices worldwide or real-wor...

Fedora 40 : workrave (2025-2d5726abb8)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2d5726abb8 advisory. Unretireing the package. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

PT-2025-17045 · Unknown · Dhanendran Rajagopal Term Taxonomy Converter

Name of the Vulnerable Software and Affected Versions: Dhanendran Rajagopal Term Taxonomy Converter versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means...

PT-2025-17214 · Redis +1 · Redis +1

Name of the Vulnerable Software and Affected Versions: DragonflyDB Dragonfly versions prior to 1.27.0 Description: The issue allows authenticated users to cause a denial of service, resulting in a daemon crash, by sending a crafted Redis command. The problem stems from the lack of validation of t...

PT-2025-17147 · Unknown · Contestswp

Name of the Vulnerable Software and Affected Versions: Run Contests, Raffles, and Giveaways with ContestsWP versions n/a through 2.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected...

PT-2025-17131 · Unknown · Rameez Iqbal Real Estate Manager

Name of the Vulnerable Software and Affected Versions: Rameez Iqbal Real Estate Manager versions n/a through 7.3 Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection'. This allows for Code Injection in the Real Estate Manager...

PT-2025-17105 · Woocommerce · Deliver Via Shipos For Woocommerce

Name of the Vulnerable Software and Affected Versions: Deliver via Shipos for WooCommerce versions 2.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-17090 · Unknown · Revamp Crm For Woocommerce

Name of the Vulnerable Software and Affected Versions: Revamp CRM for WooCommerce versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means an attacker...

PT-2025-17017

Name of the Vulnerable Software and Affected Versions Docket Cache versions through 24.07.02 Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This vulnerability allows PHP Loc...

PT-2025-17199 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 2.6 Description: The issue concerns unencrypted credential transmission during SSH authentication. Recommendations: For versions prior to 2.6, update to version 2.6 or later to resolve the issue...

PT-2025-17161 · Unknown · Wpwax Helpgent

Name of the Vulnerable Software and Affected Versions: wpWax HelpGent versions n/a through 2.2.4 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 2.2.4, update to a version later than 2.2.4 to resolve...