SUSE CVE-2025-1767

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remai...

RHEL 9 : .NET 9.0 (RHSA-2025:2668)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2668 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

Fedora 40 : xen (2025-20bd6d94b9)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-20bd6d94b9 advisory. deadlock potential with VT-d and legacy PCI device pass-through XSA-467, CVE-2025-1713 Tenable has extracted the preceding description block directly from th...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Moderate) (RHSA-2025:2518)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:2518 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

Photon OS 5.0: Linux PHSA-2025-5.0-0486

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0486. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 41 : linux-firmware (2025-7f56eb37a0)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7f56eb37a0 advisory. Update to upstream 20250311: amdgpu: many firmware updates qcom: Update gpu firmwares for qcs8300 chipset add firmware for qat420xx devices amdgpu:...

CVE-2025-20143

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges o...

Metasploit Weekly Wrap-Up 03/14/25

New module content 1 InvoiceShelf unauthenticated PHP Deserialization Vulnerability Authors: Mickaël Benassouli, Rémi Matasse, and h00die-gr3y Type: Exploit Pull request: 19950 contributed by h00die-gr3y Path: linux/http/invoiceshelfunauthrcecve202455556 AttackerKB reference: CVE-2024-55556...

CVE-2024-13771

creationtimestamp| type| source ---|---|--- 2025-03-14 12:40:10+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdmymtmnl2g 2025-03-14 13:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114161097294048919 2025-03-14 13:55:59+00:00| seen|...

Vulnerabilities fixed in Autodesk AutoCAD

Autodesk has fixed vulnerabilities in AutoCAD. The vulnerabilities in AutoCAD are related to the processing of several file types, including CATPRODUCT, CATPART, MODEL, SLDPRT and 3DM. These vulnerabilities can lead to application crashes, exposure of sensitive information and execution of...

CVE-2025-2289 Zegen - Church WordPress Theme <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Theme Options Updates

The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to impor...

CVE-2025-2289 Zegen - Church WordPress Theme <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Theme Options Updates

The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to impor...

CVE-2024-11286

creationtimestamp| type| source ---|---|--- 2025-03-14 04:53:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7524 2025-03-14 05:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkcvjvkwwg2s 2025-03-14 05:48:26+00:00| seen|...

Security Updates for Microsoft Visual Studio 2022 17.8 / 17.10 / 17.12 / 17.13 Products (March 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed ASP.NET Core and xVisual Studio Elevation of Privilege Vulnerability CVE-2025-24070 - An undisclosed Visual Studio Elevation of Privilege...

Security Updates for Microsoft Office Products C2R (March 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-24057, CVE-2025-24080,...

Security Updates for Microsoft Visual Studio 2017 15.9 Products (March 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a vulnerability: - An undisclosed Visual Studio Elevation of Privilege Vulnerability CVE-2025-24998 Note that Nessus has not tested for these issues but has instead relied only on the application's...

Security Updates for Microsoft Word Products C2R (March 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-24078, CVE-2025-24079 Note that...

Security Updates for Microsoft Access Products C2R (March 2025)

The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-26630 Note that Nessus has n...

Security Updates for Microsoft Excel Products C2R (March 2025)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-24075, CVE-2025-24081,...

Ubuntu: Security Advisory (USN-7332-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...