com.github.WHUTzju:blockchainsdk (=4.1.3), com.github.bjlhx15:common-pdf (=0.0.4) +84 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-jdk14 (>=1.51 <=1.77)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.51, =9.1.20, =0.1.1, =1.0.1.0.20180504134220, =2.2, =2.0.1, =7.0, =1.5, =12.3, =1.2.0, =1.0.0, =1.1.0, =1.0.0, =1.2.6 and more Source cves: CVE-2025-8885 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11777844...

Fedora: Security Advisory (FEDORA-2025-dbb980101e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

app.tozzi:pec-parser (>=5.0.0 <=5.1.2), at.datenwort.commons:smtp4j (>=1.0.1 <=1.0.8) +2135 more potentially affected by CVE-2025-7962 via org.eclipse.angus:angus-mail (>=2.0.0 <=2.0.3)

org.eclipse.angus:angus-mail MAVEN version =2.0.0, =5.0.0, =1.0.1, =1.0.1, =1.1.16, =1.0.1, =1.1.17, =29.v7c3891a434c3, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =8.2.2 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-ORGECLIPSEANGUS-12239873...

ai.swim:swim-js (=3.10.0), ai.swim:swim-vm (=3.10.0) +3052 more potentially affected by CVE-2025-50059 via org.graalvm.sdk:graal-sdk (>=19.0.0 <=21.0.0.2)

org.graalvm.sdk:graal-sdk MAVEN version =19.0.0, =0.0.1, =0.1.5, =0.1.5, =0.0.2, =0.0.2, =1.5.1, =1.0.0, =1.0.2, =1.0.0, =1.0.2, =1.0.2, =1.1.4 and more Source cves: CVE-2025-50059 Source advisory: SNYK:JAVA-ORGGRAALVMSDK-11998135...

ai.h2o:h2o-orc-parser (>=3.10.0.5 <=3.10.3.6), ai.hypergraph:kaliningraph-jvm (=0.2.1) +4750 more potentially affected by CVE-2025-50106 via org.graalvm.sdk:graal-sdk (>=22.0.0 <=24.0.1)

org.graalvm.sdk:graal-sdk MAVEN version =22.0.0, =3.10.0.5, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =1.1.0 and more Source cves: CVE-2025-50106 Source advisory: SNYK:JAVA-ORGGRAALVMSDK-11998131ht...

ai.swim:swim-js (=3.10.0), ai.swim:swim-vm (=3.10.0) +3052 more potentially affected by CVE-2025-30754 via org.graalvm.sdk:graal-sdk (>=19.0.0 <=21.0.0.2)

org.graalvm.sdk:graal-sdk MAVEN version =19.0.0, =0.0.1, =0.1.5, =0.1.5, =0.0.2, =0.0.2, =1.5.1, =1.0.0, =1.0.2, =1.0.0, =1.0.2, =1.0.2, =1.1.4 and more Source cves: CVE-2025-30754 Source advisory: SNYK:JAVA-ORGGRAALVMSDK-11023285...

africa.absa:inception-application (>=1.0.0 <=1.2.0), ai.ancf.lmos-router:benchmarks (>=0.2.0 <=0.28.0) +5756 more potentially affected by CVE-2025-22227 via io.projectreactor.netty:reactor-netty-http (>=1.0.0 <=1.2.7)

io.projectreactor.netty:reactor-netty-http MAVEN version =1.0.0, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid =0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter =0.1.0 - ai.ancf.lmos:lmos-router-llm =0.1...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases / javapackages-bootstrap / maven (CVE-2021-26291)

The version of CBL-Mariner Releases / javapackages-bootstrap / maven installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-26291 advisory. - Apache Maven will follow repositories that are defined in a...

com.adrianhurt:play-bootstrap_2.10 (>=1.0-P24-B4 <=1.1.1-P24-B4), com.adrianhurt:play-bootstrap_2.11 (>=1.0-P24-B4 <=1.1.1-P25-B4) +44 more potentially affected by CVE-2025-1647 via org.webjars:bootstrap (>=3.4.1 <=4.0.0-2)

org.webjars:bootstrap MAVEN version =3.4.1, =1.0-P24-B4, =1.0-P24-B4, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.8.RELEASE, =4.2.11, =2.5.0, =2.5.4 and more Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARS-10176068...

cn.jbone:jbone-ui (=1.0.0), io.springlets:springlets-boot-starter-web (>=1.2.0.RC2 <=1.2.0.RELEASE) +56 more potentially affected by CVE-2025-1647 via org.webjars.bower:bootstrap (>=3.4.1 <=4.0.0-beta.3)

org.webjars.bower:bootstrap MAVEN version =3.4.1, =1.2.0.RC2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1 and more Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-10176070...

Alibaba Cloud Linux 3 : 0171: java-1.8.0-openjdk (ALINUX3-SA-2022:0171)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0171 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-21619: Vulnerability in the Oracl...

Alibaba Cloud Linux 3 : 0233: java-1.8.0-openjdk (ALINUX3-SA-2024:0233)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0233 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-48161: Buffer Overflow...

Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities

Better TLS connection support. CVE-2025-21587 Improve compiler transformations. CVE-2025-30691 Enhance Buffered Image handling. CVE-2025-30698 The updated timezone data are needed by the new Java packages...

MGASA-2025-0156 Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities

Better TLS connection support. CVE-2025-21587 Improve compiler transformations. CVE-2025-30691 Enhance Buffered Image handling. CVE-2025-30698 The updated timezone data are needed by the new Java packages...

Fedora 39 / 40 : java-1.8.0-openjdk-portable / java-17-openjdk-portable (2025-5c15947cd4)

The remote Fedora 39 / 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-5c15947cd4 advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Linux Distros Unpatched Vulnerability : CVE-2015-4835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and...

MGASA-2025-0042 Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerability

A difficult to exploit vulnerability allows unauthenticated attackers with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can b...

CVE-2024-21210 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, corretto, openjdk-bcfips, openjdk-17-openj9, openjdk-8-openj9, openjdk, openjdk-11-openj9...

africa.absa:inception-application (>=1.1.0 <=1.2.0), africa.absa:inception-test (>=1.1.0 <=1.2.0) +1984 more potentially affected by CVE-2024-38816 via org.springframework:spring-webflux (>=5.3.0 <=5.3.39)

org.springframework:spring-webflux MAVEN version =5.3.0, =1.1.0, =1.1.0, =j11.2.6.0, =v0.3.12, =v0.3.12, =v0.3.12, =4.1.36, =4.1.36, =1.7, =1.0, =1.0.0, =1.0.1, =1.0.6 and more Source cves: CVE-2024-38816 Source advisory: OSV:GHSA-CX7F-G6MP-7HQM...

MGASA-2024-0061 Updated java 1.8.0, 11 & latest packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Array out-of-bounds access due to missing range check in C1 compiler. CVE-2024-20918 RSA padding issue and timing side-channel attack against TLS. CVE-2024-20952 Arbitrary Java code execution in Nashorn. CVE-2024-20926 JVM class file verifier fla...