AlmaLinux 9 : grafana (ALSA-2025:7404)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7404 advisory. golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing CVE-2025-30204 Tenable has extracted the preceding description block directly from...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2025-136-01)

The version of mozilla-thunderbird installed on the remote host is prior to 128.10.1esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-136-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

CVE-2024-49936

creationtimestamp| type| source ---|---|--- 2025-05-16 07:34:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16653 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

openSUSE 15 Security Update : libjxl (openSUSE-SU-2025:0139-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0139-1 advisory. - Update to release 0.8.4 Huffman lookup table size fix CVE-2024-11403 Check height limit in modular trees CVE-2024-11498 Tenable has extracted t...

Important: runc

Issue Overview: The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentialit...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2025-119-02)

The version of mozilla-thunderbird installed on the remote host is prior to 128.10.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-119-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

Amazon Linux 2023 : nodejs20, nodejs20-devel, nodejs20-full-i18n (ALAS2023-2025-942)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-942 advisory. c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in readanswers when processanswer may re-enqueue a query either due to a DNS Cookie Failure or when the...

a7a1234 (=1.0.0), aas2openapi (>=0.2.0 <=0.2.4) +2554 more potentially affected by CVE-2025-43859 via h11 (>=0.10.0 <=0.15.0)

h11 PYPI version =0.10.0, =0.2.0, =0.2.1, =1.2.1, =0.7.3.post0, =0.1.0, =2.0.0.1, =0.0.1, =0.1.0, =0.8.3, =0.1.0, =4.8.2, =0.1.0, =0.1.1 - adminui =1.5.2 and more Source cves: CVE-2025-43859 Source advisory: OSV:GHSA-VQFR-H8MV-GHFJ...

CVE-2025-23129

creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:43+00:00| seen| https://t.me/cvedetector/23119 2025-05-04 13:18:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14802 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07...

FreeBSD : chromium -- multiple security fixes (bf5d29ea-1a93-11f0-8cb5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bf5d29ea-1a93-11f0-8cb5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:1241-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1241-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Fedora 41 : webkitgtk (2025-059585d039)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-059585d039 advisory. Limit the data stored in session state. Remove the empty area below the title bar in Web Inspector when not docked. Fix various crashes and renderin...

AskAI (=0.1.0), abbegm (=0.5.0) +608 more potentially affected by unknown CVE via tokio (>=0.2.5 <=1.38.1)

tokio CARGO version =0.2.5, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =4.0.0, =0.2.0, =0.6.0, =0.1.0, =0.1.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RR8G-9FPQ-6WMG...

RuStream (>=0.0.1 <=0.0.2), RustPyNet (>=0.1.0 <=0.1.3) +591 more potentially affected by unknown CVE via pyo3 (>=0.10.1 <=0.23.5)

pyo3 CARGO version =0.10.1, =0.0.1, =0.1.0, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0020...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:1013-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1013-1 advisory. - Update to version 0.0.20250318T181448 2025-03-18T18:14:48Z jscPED-11136: GO-2025-3448 GHSA-23qp-3c2m-xx6w GO-2025-3516 GHSA-47ww-ff84-4j...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_111-default / etc (SUSE-SU-2025:0950-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0950-1 advisory. This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-46818:...

FreeBSD : vim -- potential data loss with zip.vim and specially crafted zip files (9cf03c96-ffa5-11ef-bb15-002590af0794)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9cf03c96-ffa5-11ef-bb15-002590af0794 advisory. Vim reports: See https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf Tenable has extract...

RHEL 9 : grafana-pcp (RHSA-2024:9551)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9551 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace...

Fedora 41 : firefox (2025-60c0e24d76)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-60c0e24d76 advisory. - Updated to latest upstream 136.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

SUSE SLES15 / openSUSE 15 Security Update : python (SUSE-SU-2025:0756-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0756-1 advisory. - Reference to no longer used 'bracketedhost' variable in the fix for CVE-2025-0938 bsc1236705, bsc1223694. Tenable has extracted the...