Fedora: Security Advisory (FEDORA-2025-bf07d21f3e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : nebula (2025-bf07d21f3e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bf07d21f3e advisory. Upstream update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 42 : mod_md (2025-7b0d558ac5)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7b0d558ac5 advisory. This update includes the latest upstream release of modmd, with various bug fixes and enhancements. See https://github.com/icing/modmd/releases for more...

Fedora: Security Advisory (FEDORA-2025-40fe2fec53)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-ff963b3775)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : firefox (2025-f20b9f321d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f20b9f321d advisory. - Fixed aarch64 crashes ---- - Updated to latest upstream 146.0 Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : apptainer (2025-cf169a01e8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-cf169a01e8 advisory. Apply fuse2fs patches that were accidentally empty ---- Update to upstream 1.4.5, including a fix for CVE-2025-65105 Tenable has extracted the preceding...

Fedora 41 : apptainer (2025-df330356b2)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-df330356b2 advisory. Apply fuse2fs patches that were accidentally empty ---- Update to upstream 1.4.5, including a fix for CVE-2025-65105 Tenable has extracted the preceding...

Fedora 42 : apptainer (2025-ff963b3775)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ff963b3775 advisory. Apply fuse2fs patches that were accidentally empty ---- Update to upstream 1.4.5, including a fix for CVE-2025-65105 Tenable has extracted the preceding...

CVE-2025-65827

The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP. As a result, an adversary located "upstream" can intercept the traffic, inspect its contents, and modify the requests in transit. TThis may result in a total compromise o...

CVE-2025-65830

Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary located "upstream" can decrypt the TLS traffic, inspect its contents, and modify the requests in transit. This may result in a total compromise of the user's account if t...

EUVD-2025-202618

The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP. As a result, an adversary located "upstream" can intercept the traffic, inspect its contents, and modify the requests in transit. TThis may result in a total compromise o...

EUVD-2025-202614

Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary located "upstream" can decrypt the TLS traffic, inspect its contents, and modify the requests in transit. This may result in a total compromise of the user's account if t...

CVE-2025-65830

Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary located "upstream" can decrypt the TLS traffic, inspect its contents, and modify the requests in transit. This may result in a total compromise of the user's account if t...

CVE-2025-65827

The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP. As a result, an adversary located "upstream" can intercept the traffic, inspect its contents, and modify the requests in transit. TThis may result in a total compromise o...

CVE-2025-65830

Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary located "upstream" can decrypt the TLS traffic, inspect its contents, and modify the requests in transit. This may result in a total compromise of the user's account if t...

PT-2025-50538

Name of the Vulnerable Software and Affected Versions Mobile application affected versions not specified Description A missing certificate validation allows an attacker positioned upstream to intercept and decrypt TLS traffic from the mobile application. This interception enables the attacker to...

Fedora 42 : tinyproxy (2025-a177cf4e1e)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a177cf4e1e advisory. Add upstream patch to fix CVE-2025-63938. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2025-65830

Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary located "upstream" can decrypt the TLS traffic, inspect its contents, and modify the requests in transit. This may result in a total compromise of the user's account if t...

CVE-2025-65830

The Meatmeet Pro App (specifically version v1.1.2.0 ) is vulnerable to a lack of certificate validation. This flaw allows an upstream adversary to intercept and decrypt TLS traffic, enabling them to inspect or modify requests in transit. A successful attack could result in a total compromise of t...