Fedora 41 : OpenIPMI (2025-ae55d50be2)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ae55d50be2 advisory. Update to 2.0.36 Fixes CVE-2024-42934 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

CBL Mariner 2.0 Security Update: clang16 / llvm16 (CVE-2023-29933)

The version of clang16 / llvm16 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29933 advisory. - llvm-project commit bd456297 was discovered to contain a segmentation fault via the component...

Fedora 40 : radare2 (2025-f8eca89d63)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f8eca89d63 advisory. fix CVE-2024-56737, CVE-2025-56737, CVE-2025-1864 ---- Fix CVE-2025-1744 and CVE-2025-1864 Tenable has extracted the preceding description block...

Azure Linux 3.0 Security Update: libxml2 (CVE-2025-27113)

The version of libxml2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27113 advisory. - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c...

RockyLinux 9 : keepalived (RLSA-2025:0917)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0917 advisory. keepalived: Integer overflow vulnerability in vrrpipsetshandler CVE-2024-41184 Tenable has extracted the preceding description block directly from the RockyLinux...

RockyLinux 9 : raptor2 (RLSA-2025:0312)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0312 advisory. raptor: integer underflow when normalizing a URI with the turtle parser CVE-2024-57823 Tenable has extracted the preceding description block directly from the...

RockyLinux 9 : cyrus-imapd (RLSA-2024:9195)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9195 advisory. cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command CVE-2024-34055 Tenable has extracted the preceding description block directl...

SolarWinds Web Help Desk < 12.8.5 Information Disclosure

The version of Solarwinds Web Help Desk installed on the remote host is prior to 12.8.5. It is, therefore, affected by a vulnerability. SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software. Note that...

CVE-2025-29768

Summary: CVE-2025-29768 affects Vim before 9.1.1198. The issue, described as potential data loss when opening certain crafted zip files via zip.vim, requires user interaction (viewing archive and selecting a filename) to trigger. A patch exists in Vim 9.1.1198 and later. Affected scope (from prov...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Returns an error if the block header exceeds the size of the remaining data in the file. If the block header is longer than the amount of data remaining in the file, csdsppowerup will return an error. The previou...

Fedora 40 : rsync (2025-b28759cb95)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b28759cb95 advisory. New version 3.4.1, a couple of fixes for the 3.4.0 release. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 41 : git-lfs (2025-1de066b8af)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1de066b8af advisory. Update to latest version Fix CVE-2024-53263 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 40 : git-lfs (2025-50deb0acd5)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-50deb0acd5 advisory. Update to latest version Fix CVE-2024-53263 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

UBUNTU-CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

php: Erroneous parsing of multipart form data

A flaw was found in PHP's parsing of multipart form data contents, which affects both file and input form data. This may lead to legitimate data not being processed, violating data integrity. For example, if a multipart form data payload contains a valid prefix 'X' of the defined boundary B such...

php: Erroneous parsing of multipart form data

A flaw was found in PHP's parsing of multipart form data contents, which affects both file and input form data. This may lead to legitimate data not being processed, violating data integrity. For example, if a multipart form data payload contains a valid prefix 'X' of the defined boundary B such...

Werkzeug possible resource exhaustion when parsing file data in forms

...

RLSA-2024:7463 Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

NuGet Paemgu'emgu.cv' Detection

The remote host has an artificial intelligence NuGet package 'emgu.cv' is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

NuGet Package 'BotSharp.Core' Detection

The remote host has a 'BotSharp.Core' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...