Fedora 43 : kubernetes1.31 (2025-5a4555eabc)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5a4555eabc advisory. - Update to release v1.31.14 - Resolves: rhbz2398586, rhbz2398847, rhbz2399248, rhbz2399521 - Resolves: rhbz2399702, rhbz2399720, rhbz2407787,...

Fedora 41 : kubernetes1.31 (2025-d9389fc692)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d9389fc692 advisory. - Update to release v1.31.14 - Resolves: rhbz2398586, rhbz2398847, rhbz2399248, rhbz2399521 - Resolves: rhbz2399702, rhbz2399720, rhbz2407787,...

Fedora 43 : kubernetes1.32 (2025-00368e9022)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-00368e9022 advisory. - Update to release v1.32.10 - Resolves: rhbz2414539 - Resolves: rhbz2398587, rhbz2398848, rhbz2399249, rhbz2399522 - Resolves: rhbz2399703,...

Fedora 42 : kubernetes1.31 (2025-4a1370ea1b)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4a1370ea1b advisory. - Update to release v1.31.14 - Resolves: rhbz2398586, rhbz2398847, rhbz2399248, rhbz2399521 - Resolves: rhbz2399702, rhbz2399720, rhbz2407787,...

RockyLinux 10 : python-kdcproxy (RLSA-2025:21142)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2025:21142 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : MySQL vulnerabilities (USN-7873-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7873-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues...

python-kdcproxy: Remote DoS via unbounded TCP upstream buffering

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...

python-kdcproxy: Remote DoS via unbounded TCP upstream buffering

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...

TencentOS Server 3: tomcat (TSSA-2025:0592)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0592 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

USN-7873-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7. In addition to security fixes, the...

Fedora: Security Advisory (FEDORA-2025-457000540a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : suricata (2025-a366512b23)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a366512b23 advisory. Upstream security/bugfix release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 42 : suricata (2025-0490389cb0)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0490389cb0 advisory. upstream bugfix/security release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : kubernetes1.33 (2025-fe1d8025b0)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-fe1d8025b0 advisory. Automatic update for kubernetes1.33-1.33.6-1.fc44. Changelog Thu Nov 13 2025 Bradley G Smith - 1.33.6-1 - Update to release v1.33.6 - Resolves:...

Fedora 41 : luksmeta (2025-78747a63cd)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-78747a63cd advisory. New upstream release v10 Fix: CVE-2025-11568 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Fedora 42 : luksmeta (2025-457000540a)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-457000540a advisory. New upstream release v10 Fix: CVE-2025-11568 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Fedora 41 : docker-buildkit (2025-122a933cad)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-122a933cad advisory. - Update to v0.25.2 - CVE-2025-58183; Resolves: rhbz2412529 - CVE-2025-58188; Resolves: rhbz2412380, rhbz2411476, rhbz2410945 - CVE-2025-58185;...

EUVD-2025-150356

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. Prior to version 1.23.0, when using subrequest authentication, Anubis did not perform validation of the redirect URL and redirects user to any URL scheme. While most...

Siemens SIMATIC S7-1500 Uncontrolled Resource Consumption (CVE-2023-35945)

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header map and bookkeeping structures upon receiving RSTSTREAM immediately followed by the GOAWAY frames from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the GOAWA...

Fedora 42 : docker-buildkit (2025-ac008831d6)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ac008831d6 advisory. - Update to v0.25.2 - CVE-2025-58183; Resolves: rhbz2412529 - CVE-2025-58188; Resolves: rhbz2412380, rhbz2411476, rhbz2410945 - CVE-2025-58185;...