EUVD-2017-8424

Malware in sbrugna...

Fedora 44 : nextcloud (2025-b4b3303299)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b4b3303299 advisory. Automatic update for nextcloud-31.0.9-1.fc44. Changelog Sat Sep 20 2025 Andrew Bauer - 31.0.9-1 - 31.0.9 release RHBZ2388493 RHBZ2389830 RHBZ2389831...

NewStart CGSL MAIN 7.02 : ghostscript Multiple Vulnerabilities (NS-SA-2025-0121)

The remote NewStart CGSL host, running version MAIN 7.02, has ghostscript packages installed that are affected by multiple vulnerabilities: - Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword e.g., for runpdf has a \000 byte in the middle. CVE-2024-29509 - Artifex...

FreeBSD : chromium -- multiple security fixes (9c91e1f8-f255-4b57-babe-2e385558f1dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9c91e1f8-f255-4b57-babe-2e385558f1dc advisory. Chrome Releases reports: This update includes 11 security fixes: Tenable has extracted the...

FreeBSD : chromium -- multiple security fixes (4323e86c-2422-4fd7-8c8f-ec71c81ea7dd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4323e86c-2422-4fd7-8c8f-ec71c81ea7dd advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

AlmaLinux 9 : kernel (ALSA-2025:8643)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:8643 advisory. kernel: net: gso: fix ownership in udpgsosegment CVE-2025-21926 kernel: vlan: enforce underlying device type CVE-2025-21920 kernel: xsk: fix an integer...

Fedora 40 : trafficserver (2025-3467f5b68d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3467f5b68d advisory. Resolves CVE-2024-53868 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Amazon Linux 2 : ghostscript (ALAS-2025-2805)

The version of ghostscript installed on the remote host is prior to 9.54.0-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2805 advisory. Potential integer and buffer overflow with DollarBlend during serializing a multiple master font for passing to...

CVE-2025-20014

creationtimestamp| type| source ---|---|--- 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-01 2025-01-29 19:50:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113913377924306687 2025-01-29 20:16:00+00:00| seen|...

FreeBSD : Gitlab -- Vulnerabilities (24c93a28-d95b-11ef-b6b2-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24c93a28-d95b-11ef-b6b2-2cf05da270f3 advisory. Gitlab reports: Stored XSS via Asciidoctor render Developer could exfiltrate protected CI/CD...

CVE-2025-21240

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:18:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuf4ulzk2n 2025-01-14 18:33:34+00:00| seen|...

CVE-2023-37931

creationtimestamp| type| source ---|---|--- 2025-01-14 14:13:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113827118923238477 2025-01-14 14:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgtukbmf2f 2025-01-14 14:27:54+00:00| seen|...

D-Link DIR-619L Multiple Vulnerabilities (2024 - 2025)

D-Link DIR-619L devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-49065

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 18:07:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113629858689613937 2025-01-08 05:39:20+00:00| seen|...

Adobe Illustrator < 28.7.3 / 29.0.0 < 29.1.0 Multiple Arbitrary code execution (APSB24-94)

The version of Adobe Illustrator installed on the remote Windows host is prior to 28.7.3, 29.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-94 advisory. - Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability...

FreeBSD : electron31 -- multiple vulnerabilities (773e7eb2-af19-4fc7-be7f-0f6a2523b98b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 773e7eb2-af19-4fc7-be7f-0f6a2523b98b advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

Fedora 37 : wireshark (2022-9d4aa8a486)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-9d4aa8a486 advisory. New version 4.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

FreeBSD : chromium -- multiple security fixes (ab254c9d-9c36-11ef-8c1c-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ab254c9d-9c36-11ef-8c1c-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the...

CVE-2021-3708

creationtimestamp| type| source ---|---|--- 2021-12-29 21:33:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1247 2024-11-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-04 2024-11-05 00:00:00+00:00| seen| The Shadowserver...

OPENSUSE-SU-2021:2320-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: - Update to version 3.36.0 - CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener optimization bsc1173641 - CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated...