ALSA-2025:2500 Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

Amazon Linux 2 : kernel (ALAS-2025-2775)

The version of kernel installed on the remote host is prior to 4.14.355-274.598. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2775 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are...

Control iD RHiD 安全漏洞

Control iD RHiD is a complete system from Control iD that allows point computing in the cloud. A security vulnerability exists in Control iD RHiD version 25.2.25.0, which stems from an incorrect manipulation of the parameter nsr can lead to improper control of resource identifiers...

CVE-2025-0177 Javo Core <= 3.0.0.080 - Unauthenticated Privilege Escalation in ajax_signup

The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileg...

CVE-2025-1121

creationtimestamp| type| source ---|---|--- 2025-03-07 01:34:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6780 2025-03-07 01:55:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljqvowe76w2j 2025-03-07 02:23:35+00:00| seen| https://t.me/cvedetector/19767 2025-03-08...

SUSE: Security Advisory (SUSE-SU-2025:0788-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7330-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4078-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:0788-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

chromedriver-134.0.6998.35-1.1 on GA media (moderate)

chromedriver-134.0.6998.35-1.1 on GA media Announcement ID: openSUSE-SU-2025:14854-1 Rating: moderate Cross-References: CVE-2025-1914 CVE-2025-1915 CVE-2025-1916 CVE-2025-1917 CVE-2025-1918 CVE-2025-1919 CVE-2025-1921 CVE-2025-1922 CVE-2025-1923 Affected Products: openSUSE Tumbleweed An update th...

SUSE: Security Advisory (SUSE-SU-2025:0783-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-25381

creationtimestamp| type| source ---|---|--- 2025-03-06 22:12:28+00:00| seen| https://t.me/cvedetector/19741 2025-03-07 20:40:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6884 2025-03-08 04:35:53+00:00| seen| Telegram/mdEZ2BU2JO91Awb8yI56jdsbO6CX1VePMSgHVILnJ6RWMBD...

CVE-2025-1383

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.2. This is due to missing or incorrect nonce validation on the ajaxtranscriptdelete function. This makes it possible for unauthenticated attackers to delete...

SUSE: Security Advisory (SUSE-SU-2025:0775-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : firefox (2025-60c0e24d76)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-60c0e24d76 advisory. - Updated to latest upstream 136.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Debian dla-4078 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4078 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4078-1 [email protected]...

Ubuntu: Security Advisory (USN-7323-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7331-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: kernel-coco / kernel-coco-devel / kernel-coco_debug / etc (SUSE-SU-2025:0784-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0784-1 advisory. The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs we...

Linux Distros Unpatched Vulnerability : CVE-2024-56571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Require entities to have a non-zero unique ID Per UVC 1.1+ specification...