Mozilla Thunderbird Security Update (mfsa_2025-84) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Fedora: Security Advisory (FEDORA-2025-f847ce2596)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : log4cxx (2025-1b48c1a920)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1b48c1a920 advisory. Update to 1.5.0, fix CVE-2025-54813, CVE-2025-22838 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 41 : chromium (2025-2d4d91b00a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2d4d91b00a advisory. Update to 141.0.7390.54 High CVE-2025-11205: Heap buffer overflow in WebGPU High CVE-2025-11206: Heap buffer overflow in Video Medium CVE-2025-11207...

Google Chrome Security Update (stable-channel-update-for-desktop-2025-10) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

EUVD-2021-0319

Malware in sbrugna...

PT-2025-42563

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.44.1 Description A flaw exists in MediaWiki related to improper input handling during web page generation, potentially leading to Cross-site Scripting XSS. The issue is located in the CodexTablePager.Php file...

EUVD-2024-2768

Malicious code in bioql PyPI...

EUVD-2022-6161

Malicious code in bioql PyPI...

EUVD-2021-30707

Malicious code in bioql PyPI...

EUVD-2025-8513

Malicious code in bioql PyPI...

EUVD-2025-29224

Malicious code in bioql PyPI...

Fedora: Security Advisory (FEDORA-2025-ca5f759234)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4304-1] cjson security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4304-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 18, 2025 https://wiki.debian.org/LTS -...

PT-2025-38306

Name of the Vulnerable Software and Affected Versions WP Legal Pages plugin for WordPress versions up to and including 3.4.3 Description The WP Legal Pages plugin for WordPress is susceptible to unauthorized access of functionality due to a missing capability check on the wplp gdpr install plugin...

Google Chrome Security Update (stable-channel-update-for-desktop_17-2025-09) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

KLA88207 DoS vulnerability in Opera

Type confusion vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 122.0.5643.51 Stable update Related products Opera CVE list CVE-2025-10585 critical Solution Update tot he latest version Download Opera Impacts Do...

PT-2025-38307

Name of the Vulnerable Software and Affected Versions Ghost Kit – Page Builder Blocks, Motion Effects & Extensions plugin for WordPress versions through 3.4.3 Description The Ghost Kit – Page Builder Blocks, Motion Effects & Extensions plugin for WordPress is susceptible to Stored Cross-Site...

PT-2025-38231

Name of the Vulnerable Software and Affected Versions: Thorium versions prior to 1.1.1 Description: Thorium does not limit the rate of requests to send account verification email messages. This allows a remote, unauthenticated attacker to send an unlimited number of messages to a user awaiting...

PT-2025-38079

Name of the Vulnerable Software and Affected Versions Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin versions prior to 14 Description The plugin fails to validate the path of files intended for download. This allows an unauthenticated attacker to perform a pa...