PT-2025-13166 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03 Description: The issue could lead to credential leakage on the Cloud Profiles page due to an exception. Recommendations: For versions prior to 2025.03, update to version 2025.03 or later to resolve...

Ubuntu: Security Advisory (USN-7372-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Tools Authentication Bypass Vulnerability (VMSA-2025-0005) - Windows

VMware Tools is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools";...

Fedora: Security Advisory (FEDORA-2025-d487e15b69)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA81938 SB vulnerability in Google Chrome

Security vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2025-2783 critical Solution Update to the latest version Download...

PT-2025-12776 · Asustor · Adm

Name of the Vulnerable Software and Affected Versions: ADM versions 4.1.0 through 4.3.3.RH61 ADM version 5.0.0.RIN1 and earlier Description: A stored Cross-Site Scripting XSS issue exists in the Access Control of ADM. The vulnerability allows an attacker to inject malicious scripts into the folde...

PT-2025-12741 · WordPress · Wp-Advanced-Search

Name of the Vulnerable Software and Affected Versions: WP-Advanced-Search versions prior to 3.3.9.3 Description: The issue concerns the WordPress WP-Advanced-Search plugin, where some settings are not properly sanitized and escaped. This could allow high-privilege users, such as admins, to perfor...

Mageia: Security Advisory (MGASA-2025-0113)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-27473 · Unknown · Filebrowser

Name of the Vulnerable Software and Affected Versions: File Browser versions prior to 2.33.10 Description: The issue affects the implementation of the allowlist in File Browser, allowing unauthorized execution of shell commands. The impact depends on the configured commands and installed binaries...

PT-2025-12833

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.0.3 Tanzu RabbitMQ versions prior to 4.0.3 and 3.13.8 Description RabbitMQ is a messaging and streaming broker. A sophisticated attack could modify the virtual host name on disk, making it unrecoverable and leading...

AlmaLinux 9 : libxslt (ALSA-2025:3107)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:3107 advisory. libxslt: Use-After-Free in libxslt numbers.c CVE-2025-24855 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. No...

Debian: Security Advisory (DLA-4089-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2025:0098-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreOffice Improper Certificate Validation Vulnerability (Mar 2025) - Linux

LibreOffice is prone to an improper certificate validation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice Improper Certificate Validation Vulnerability (Mar 2025) - Mac OS X

LibreOffice is prone to an improper certificate validation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Advisory (SUSE-SU-2025:0974-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-1d68ba6806)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-2fe21e3da5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-27771 · Mikrotik · Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik RouterOS versions prior to 7.19.2 Description: A cross-site scripting issue is present in the hotspot of MikroTik's RouterOS. An attacker can inject the javascript protocol in the dst parameter. When the victim browses to the malicio...