Medium: microcode_ctl

Issue Overview: A potential security vulnerability in some Intelr Processors may allow information disclosure. Intel is releasing microcode updates and prescriptive guidance to mitigate this potential vulnerability. Info:...

Amazon Linux 2 : microcode_ctl (ALAS-2025-2872)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2872 advisory. A potential security vulnerability in some Intelr Processors may allow information disclosure. Intel is releasing...

Oracle Linux 8 : pcs (ELSA-2025-8254)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8254 advisory. - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-93167 Tenable has extracted the preceding description block directly from the Oracle...

Craft CMS stores user-provided content session files

RISK EVALUATION Craft CMS stores user-provided content in session files. A remote, unauthenticated attacker can introduce arbitrary content, including PHP code, into session files with known names and locations. If an attacker can access these files, possibly through another vulnerability such...

CVE-2025-48734

creationtimestamp| type| source ---|---|--- 2025-05-28 13:56:26+00:00| seen| https://seclists.org/oss-sec/2025/q2/175 2025-05-28 13:57:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114585806930591300 2025-05-28 15:22:46+00:00| seen|...

CVE-2025-4134 Lack of file validation in Avast Business Antivirus for Linux allows writing untrusted update files

Lack of file validation in doupdatevps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write...

CVE-2025-4134

Avast Business Antivirus for Linux 4.5 contains a vulnerability in the do_update_vps function that lacks proper file validation, allowing a local user to spoof or tamper with update files via an unverified file write. This is a local-privilege issue with potential impact on update integrity. A pa...

CVE-2024-54020

A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests...

USN-7521-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Serial ATA and Parallel...

Intel Core Ultra Processors CNVi Security Update May 2025

Intel has informed HP of a potential security in the Intel® Integrated Connectivity I/O interface CNVi for some Intel® Core™ Ultra Processors, which might allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to...

Fedora 41 : nodejs20 (2025-0c2b7a8f32)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0c2b7a8f32 advisory. Update to 20.19.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2025-148-02)

The version of mozilla-thunderbird installed on the remote host is prior to 128.11.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-148-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)

Summary DS8900F and DS8A00 updates have been released to address following vulnerabilities. Review the Vulnerability Details section below for additional information. CVE-2023-40547 CVSS Base Score:8.3, CVE-2024-5564 CVSS Base Score:8.1, CVE-2022-48624 CVSS Base Score:7.8, CVE-2022-48624 CVSS Bas...

MGASA-2025-0165 Updated rootcerts, nss & firefox packages fix security vulnerabilities

Out-of-bounds access when resolving Promise objects. CVE-2025-4918 Out-of-bounds access when optimizing linear sums. CVE-2025-4919...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

CVE-2024-52588

creationtimestamp| type| source ---|---|--- 2025-05-27 14:27:33+00:00| published-proof-of-concept| https://github.com/strapi/strapi/security/advisories/GHSA-v8wj-f5c7-pvxf 2025-05-29 10:13:44+00:00| seen|...

Vulnerability fixed in Siemens SiPass Integrated

Siemens has fixed a vulnerability in SiPass Integrated. The vulnerability is in the server applications of the SiPass Integrated system, specifically in the way it handles out-of-bounds reads. This can lead to a denial-of-service DoS, compromising the availability of services that depend on the...

Alibaba Cloud Linux 3 : 0071: redis:6 (ALINUX3-SA-2025:0071)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0071 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-21605: Redis is an open source, in-memory...

kernel security update

5.14.0-570.18.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Alibaba Cloud Linux 3 : 0078: yelp (ALINUX3-SA-2025:0078)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0078 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-3155: A flaw was found in Yelp. The Gnome...