Fedora 41 : php-phpseclib (2025-91d6e174d9)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-91d6e174d9 advisory. Security fix for CVE-2023-52892, CVE-2024-27354 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Fedora 41 : vaultwarden (2025-41f4056b0e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-41f4056b0e advisory. update to 1.33.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-5W3C-WPH9-HQ92

creationtimestamp| type| source ---|---|--- 2025-02-07 22:30:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113964969320102674...

OPENSUSE-SU-2025:0056-1 Security update for trivy

This update for trivy fixes the following issues: Update to version 0.58.2 boo1234512, CVE-2024-45337, boo1235265, CVE-2024-45338: fixmisconf: allow null values only for tf variables backport: release/v0.58 8238 fixsuse: SUSE - update OSType constants and references for compatility backport:...

Security Bulletin: Vulnerability in pypa/setuptools affects watsonx.data

Summary pypa/setuptools is vulnerable to arbitrary code execution attacks, which could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: pypa/setuptools could allow a remote attacker to execute arbitrary code on the system, caused by an error in the packageindex module. ...

RHSA-2025:0878 Red Hat Security Advisory: OpenShift Container Platform 4.17.15 packages and security update

Bulletin has no description...

CVE-2025-25117

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleog7dgw26 2025-02-07 12:00:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113962493500243898...

Exciting updates to the Copilot (AI) Bounty Program: Enhancing security and incentivizing innovation

At Microsoft, we are committed to fostering a secure and innovative environment for our customers and users. As part of this commitment, we are thrilled to announce significant updates to our Copilot AI Bounty Program. These changes are designed to enhance the program's effectiveness, incentivize...

Vulnerabilities fixed in Cisco Identity Services Engine

Cisco has fixed vulnerabilities in Cisco Identity Services Engine ISE. The vulnerabilities are in the API of Cisco ISE, which allows an authenticated remote malicious person to execute arbitrary commands as the root user through insecure deserialization of Java byte streams. All of these...

Vulnerabilities fixed in Cisco AsyncOS Software

Cisco has fixed vulnerabilities in Cisco AsyncOS Software Specific to Cisco Secure Web Appliance and Cisco Secure Email Gateway. The vulnerabilities are in the way Cisco AsyncOS Software handles requests and configuration files. An attacker can gain unauthenticated access to the system by using...

CVE-2024-13352

creationtimestamp| type| source ---|---|--- 2025-02-07 06:12:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113961122645272686 2025-02-07 06:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkxavpowy26 2025-02-07 07:57:37+00:00| seen|...

CVE-2025-1072

creationtimestamp| type| source ---|---|--- 2025-02-07 04:10:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113960644266809055 2025-02-07 04:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkqicnisu2s 2025-02-07 07:57:37+00:00| seen|...

Fedora 40 : FlightGear / SimGear (2025-725bba93b2)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-725bba93b2 advisory. Fix CVE-2025-0781 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 40 : java-latest-openjdk (2025-d2f32b0607)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d2f32b0607 advisory. January CPU 2025 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2025-21404

creationtimestamp| type| source ---|---|--- 2025-02-06 22:58:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113959418345354392 2025-02-06 23:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7q7nopg2u 2025-02-07 02:06:40+00:00| seen|...

CVE-2025-21267

creationtimestamp| type| source ---|---|--- 2025-02-06 22:43:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113959359296898071 2025-02-06 23:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7pw4bgy2t 2025-02-07 02:06:46+00:00| seen|...

CVE-2025-21253

creationtimestamp| type| source ---|---|--- 2025-02-06 22:43:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113959359282487646 2025-02-06 23:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7ptlqch2a 2025-02-07 02:06:46+00:00| seen|...

MGASA-2025-0040 Updated gstreamer1.0, gstreamer1.0-plugins-base & gstreamer1.0-plugins-good packages fix security vulnerabilities

GStreamer has an OOB-write in isomp4/qtdemux.c. CVE-2024-47537 GStreamer has a stack-buffer overflow in vorbishandleidentificationpacket. CVE-2024-47538 GStreamer has an OOB-write in converttos3341a. CVE-2024-47539 GStreamer uses uninitialized stack memory in Matroska/WebM demuxer. CVE-2024-47540...

CVE-2025-22936

creationtimestamp| type| source ---|---|--- 2025-02-06 19:32:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113958608951294799 2025-02-06 20:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvpbsnj22s 2025-02-06 21:55:22+00:00| seen|...

CVE-2024-52892

creationtimestamp| type| source ---|---|--- 2025-02-06 19:32:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113958608936576132 2025-02-06 20:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvoyrcog2t 2025-02-06 21:55:30+00:00| seen|...