Fedora 44 : ffuf (2025-e4abb78d54)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e4abb78d54 advisory. Automatic update for ffuf-2.1.0-1.fc44. Changelog Wed Aug 13 2025 Sandipan Roy - 2.1.0-1 - Update to version 2.1.0 - Update to 2.1.0 - Closes rhbz2061180...

python-future 安全漏洞

python-future is a Python compatible software open source by Python Charmers. A security vulnerability exists in python-future version 1.0.0, which stems from the automatic import of the test.py file and could lead to the execution of arbitrary code...

CVE-2025-50817

Summary of CVE-2025-50817 : IBM security bulletins describe an arbitrary code execution in Python-Future 1.0.0 via unintended import of a local file named test.py when the module is loaded. The risk relies on an attacker who can write files to the server; Python’s import mechanism loads test.py f...

PT-2025-33169 · WordPress · Valvepress Pinterest Automatic Pin

Name of the Vulnerable Software and Affected Versions: ValvePress Pinterest Automatic Pin affected versions not specified Description: An improper neutralization of special elements used in an SQL command vulnerability exists in ValvePress Pinterest Automatic Pin. This allows for SQL injection...

Fedora 43 : ghostscript (2025-c3e110251c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c3e110251c advisory. Automatic update for ghostscript-10.05.1-2.fc43. Changelog Tue May 27 2025 Zdenek Dohnal - 10.05.1-2 - CVE-2025-48708 ghostscript: Ghostscript...

Fedora 43 : opentofu (2025-121049bbf7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-121049bbf7 advisory. Automatic update for opentofu-1.9.1-1.fc43. Changelog Wed May 14 2025 Mikel Olasagasti Uranga - 1.9.1-1 - Update to 1.9.1 - Closes rhbz2362077...

Fedora 43 : pymol (2025-3876147cc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3876147cc5 advisory. Automatic update for pymol-3.1.0-4.fc43. Changelog Mon Jun 2 2025 Antonio Trande - 3.1.0-4 - Fix rhbz2369768 Tue Feb 4 2025 Miroslav Such - 3.1.0-3 - Correct...

Fedora 43 : lua-http (2025-0db06733a2)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0db06733a2 advisory. Automatic update for lua-http-0.3-17.fc43. Changelog Mon May 26 2025 Jakub Ruika - 0.3-17 - Fix CVE-2023-4540 rhbz2237419 Tenable has extracted the preceding...

Fedora 43 : aerc (2025-edd8754757)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-edd8754757 advisory. Automatic update for aerc-0.20.1-3.fc43. Changelog Thu Jun 5 2025 Robin Jarry - 0.20.1-3 - Fix CVE-2025-49466 fedora2370376 Wed Apr 16 2025 Michael J Gruber ...

Fedora 43 : nextcloud (2025-ffaf646c29)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ffaf646c29 advisory. Automatic update for nextcloud-31.0.5-1.fc43. Changelog Mon May 26 2025 Andrew Bauer - 31.0.5-1 - 31.0.5 release RHBZ2364462 RHBZ2366729 RHBZ2366735...

CVE-2025-8826

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function umrpautochannel of the file /goform/RPsetBasicAuto. The manipulation of the argument apcliAuthMode2G/apcliAuthMode5G leads to stack-based buffer...

CVE-2025-54998

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass or LDAP auth systems. This was caused by...

Authentication Bypass

github.com/openbao/openbao is vulnerable to Authentication bypass. The vulnerability is due to improper aliasing between pre-flight and full login request user entity alias attributions, which allows an attacker to bypass the automatic user lockout mechanisms in the Userpass or LDAP authenticatio...

atm: clip: prevent NULL deref in clip_push()

...

net: atm: add lec_mutex

...

Fedora 43 : micropython (2025-4f95f160be)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4f95f160be advisory. Automatic update for micropython-1.25.0-1.fc43. Changelog Fri May 9 2025 Charalampos Stratakis - 1.25.0-1 - Update to 1.25.0 - Security fixes for...

DEBIAN-CVE-2025-8454

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...

Devolutions Server <= 2025.2.5.0 Deadlock (DEVO-2025-0013) (CVE-2025-8312)

The version of Devolutions Server installed on the remote host is prior or equial to 2025.2.5.0 and is, therefore, affected by a deadlock vulnerability: - Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its intended check-out...

CVE-2025-8312

Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its intended check-out period due to a deadlock occurring in the scheduling service.This issue affects the following versions : Devolutions Server 2025.2.2.0 through 2025.2.5.0...

Fedora 43 : libtiff (2025-be254abbfe)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-be254abbfe advisory. Automatic update for libtiff-4.7.0-5.fc43. Changelog Tue Jul 29 2025 Michal Hlavinka - 4.7.0-5 - fix CVE-2025-8177: buffer oveflow in thumbnail setrow when...