CVE-2025-29830

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 18:30:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16189...

CVE-2025-29971

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-22 22:53:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17365...

CVE-2025-29957

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-29 13:28:25+00:00| seen| https://infosec.exchange/users/0patch/statuses/114591354341052396 2025-05-29 13:28:58+00:00| seen|...

Amazon Linux 2023 : gnuplot-common, gnuplot-latex, gnuplot-minimal (ALAS2023-2025-960)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-960 advisory. A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment. CVE-2025-3359 Tenable has extracted the preceding description block directly from the tested...

openSUSE Security Advisory (SUSE-SU-2025:1525-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : chromium (2025-24e77c2676)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-24e77c2676 advisory. Update to 136.0.7103.92 CVE-2025-4372: Use after free in WebAudio Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2025-3811

CVE-2025-3811 (WPBookit) affects the WordPress plugin WPBookit in all versions up to 1.0.2. The issue is an authentication/identity validation flaw in edit_newdata_customer_callback() that allows an unauthenticated attacker to change arbitrary users’ emails (including administrators), enabling pa...

CVE-2025-3811 WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update

The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like email through the editnewdatacustomercallback function...

RockyLinux 8 : python-idna (RLSA-2024:4260)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:4260 advisory. python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Tenable has extracted the preceding description bloc...

RHEL 9 : kernel-rt (RHSA-2025:4471)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4471 advisory. CVE-2025-21927, BZ2356593 CVE-2025-21927, RHEL-87233 RHEL-88572 Tenable has extracted the preceding description block directly from the Red Hat...

Docker Desktop 安全漏洞

Docker Desktop is a desktop software for lightweight deployment of applications based on container technology from Docker Inc. in the United States. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

CVE-2025-28236

Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution RCE vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the //software/upgrades endpoint...

CVE-2025-3603 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

DSA-5906-1 erlang - security update

Bulletin has no description...

CVE-2025-28236

Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution RCE vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the //software/upgrades endpoint...

CVE-2025-28236

Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution RCE vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the //software/upgrades endpoint...

CVE-2025-28236

CVE-2025-28236 affects Nautel VX Series transmitters running VX SW 6.4.0 and earlier. The root cause is a security flaw in the firmware update process that allows arbitrary code execution when a crafted update package is sent to the endpoint /#/software/upgrades, enabling remote code execution wi...

CVE-2025-28236

Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution RCE vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the //software/upgrades endpoint...

CVE-2025-3294

CVE-2025-3294 affects the WordPress WP Editor plugin up to version 1.2.9.1. The issue is an authenticated directory-traversal flaw (no proper file path validation) that can enable an attacker with Administrator-level access and above to overwrite arbitrary server files, potentially enabling remot...

SUSE-SU-2025:1262-1 Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059164 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tundetach bsc1232818. - CVE-2022-49563: crypto: qat - add param check for RSA bsc1238788. - CVE-2022-49564: crypto: qat - add param...