Azure Linux 3.0 Security Update: xerces-c (CVE-2024-23807)

The version of xerces-c installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23807 advisory. - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered...

FPGA Support Package for the Intel® oneAPI DPC++/C++ Compiler Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01218.html...

Debian dla-4050 : bind9 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4050 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4050-1 [email protected] https://www.debian.org/lts/security/...

Azure Linux 3.0 Security Update: python3 (CVE-2024-6923)

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6923 advisory. - There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote newlines...

PT-2025-6238 · Ivanti · Ivanti Csa

Name of the Vulnerable Software and Affected Versions: Ivanti CSA versions prior to 5.0.5 Description: The issue allows a remote unauthenticated attacker to access restricted functionality due to path traversal. There is also a mention of OS command injection in the admin web console, which can...

[SECURITY] [DSA 5862-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5862-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 10, 2025 https://www.debian.org/security/faq -...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47698)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47698 advisory. - In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: f...

Azure Linux 3.0 Security Update: cups (CVE-2023-34241)

The version of cups installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-34241 advisory. - OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating...

Huawei EulerOS: Security Advisory for python-requests (EulerOS-SA-2025-1165)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Linux 3.0 Security Update: nodejs / nodejs18 / python-jinja2 (CVE-2024-34064)

The version of nodejs / nodejs18 / python-jinja2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-34064 advisory. - Jinja is an extensible templating engine. The xmlattr filter in affected versions...

Azure Linux 3.0 Security Update: nodejs / nodejs18 (CVE-2024-30261)

The version of nodejs / nodejs18 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-30261 advisory. - Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the integri...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47697)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47697 advisory. - In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: f...

Azure Linux 3.0 Security Update: python-urllib3 / python3 (CVE-2023-43804)

The version of python-urllib3 / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-43804 advisory. - urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cooki...

SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2025:0377-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0377-1 advisory. - Update to version 20250115.01 bsc1236406, bsc1236407 - CVE-2024-24790: Bump the golang compiler version to 1.22.4 bsc1225974 Tenable has...

Huawei EulerOS: Security Advisory for python-requests (EulerOS-SA-2025-1197)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-24028

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vulnerability is caused by differences between how Joplin's HTML sanitizer handles comments and how the browser handles comments. This affects both the Rich Tex...

CVE-2023-5878

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

CVE-2025-24028

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vulnerability is caused by differences between how Joplin's HTML sanitizer handles comments and how the browser handles comments. This affects both the Rich Tex...

BIT-GITLAB-2024-5528 Incomplete Comparison with Missing Factors in GitLab

An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages...

PT-2025-5994 · Unknown · Eli 280/Bur280/Mlbur 280 Resting Electrocardiograph +3

Name of the Vulnerable Software and Affected Versions: ELI 380 Resting Electrocardiograph versions 2.6.0 and prior ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph versions 2.3.1 and prior ELI 250c/BUR 250c Resting Electrocardiograph versions 2.1.2 and prior ELI 150c/BUR 150c/MLBUR 150c Restin...