PT-2025-12138

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.32 Description The absence of authentication mechanisms in open-webui/open-webui allows any unauthenticated attacker to access the api/v1/utils/code/format endpoint. If a malicious actor sends a POST request...

PT-2025-12366

Name of the Vulnerable Software and Affected Versions go-redis versions prior to 9.5.5 go-redis versions prior to 9.6.3 go-redis versions prior to 9.7.3 Description The issue occurs when CLIENT SETINFO times out during connection establishment, potentially causing out-of-order responses. This can...

SUSE SLES15 Security Update : kernel (Live Patch 41 for SLE 15 SP3) (SUSE-SU-2025:0942-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0942-1 advisory. This update for the Linux Kernel 5.3.18-15030059150 fixes several issues. The following security issues were fixed: - CVE-2024-46818:...

SUSE SLES12 Security Update : kernel (Live Patch 56 for SLE 12 SP5) (SUSE-SU-2025:0892-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0892-1 advisory. This update for the Linux Kernel 4.12.14-122216 fixes several issues. The following security issues were fixed: - CVE-2024-46818:...

Oracle Linux 8 : kernel (ELSA-2025-3026)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3026 advisory. - gve: Clear napi-skb before devkfreeskbany Joshua Washington RHEL-73269 CVE-2024-40937 - can: bcm: Fix UAF in bcmprocshow CKI Backport Bot RHEL-80733...

Slackware Linux 15.0 / current libarchive Multiple Vulnerabilities (SSA:2025-079-01)

The version of libarchive installed on the remote host is prior to 3.7.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-079-01 advisory. New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

XenServer - Potential performance issues on imported Windows VMs

When importing Windows VMs into XenServer, for example by using the Conversion Manager virtual appliance or the OVF import functionality in XenCenter, in some circumstances these VMs may not have been optimized for peak performance, as they may be missing certain Viridian optimization flags. If y...

OPENSUSE-SU-2025:14912-1 mercurial-6.9.4-1.1 on GA media

These are all security issues fixed in the mercurial-6.9.4-1.1 package on the GA media of openSUSE Tumbleweed...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56629)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56629 advisory. - In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name...

SUSE SLES12 Security Update : kernel (Live Patch 59 for SLE 12 SP5) (SUSE-SU-2025:0927-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0927-1 advisory. This update for the Linux Kernel 4.12.14-122225 fixes several issues. The following security issues were fixed: - CVE-2024-46818:...

OPENSUSE-SU-2025:14914-1 python311-joblib-1.4.2-2.1 on GA media

These are all security issues fixed in the python311-joblib-1.4.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14913-1 python311-Django-5.1.7-1.1 on GA media

These are all security issues fixed in the python311-Django-5.1.7-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : kernel (Live Patch 49 for SLE 15 SP3) (SUSE-SU-2025:0961-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0961-1 advisory. This update for the Linux Kernel 5.3.18-15030059179 fixes several issues. The following security issues were fixed: - CVE-2024-46818:...

EulerOS 2.0 SP12 : git (EulerOS-SA-2025-1296)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

Google Chrome < 134.0.6998.117 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 134.0.6998.117. It is, therefore, affected by multiple vulnerabilities as referenced in the 202503stable-channel-update-for-desktop19 advisory. - CVE-2025-2476 is a use after free in Lens. It was reported by SungKwon Lee ...

Azure Linux 3.0 Security Update: cmake / nghttp2 / nodejs / nodejs18 (CVE-2023-35945)

The version of cmake / nghttp2 / nodejs / nodejs18 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-35945 advisory. - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's...

Azure Linux 3.0 Security Update: cert-manager / cf-cli / docker-buildx / docker-compose / kubernetes / kubevirt / moby-compose (CVE-2025-22869)

The version of cert-manager / cf-cli / docker-buildx / docker-compose / kubernetes / kubevirt / moby-compose installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22869 advisory. - SSH servers which...

OPENSUSE-SU-2025:14915-1 tomcat10-10.1.39-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.39-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14916-1 xorg-x11-server-21.1.15-3.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.15-3.1 package on the GA media of openSUSE Tumbleweed...

RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.4.20 (RHSA-2018:1450)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1450 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...