Alibaba Cloud Linux 3 : 0140: mingw-sqlite (ALINUX3-SA-2025:0140)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0140 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLi...

TencentOS Server 4: iputils (TSSA-2025:0652)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0652 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Mozilla Firefox Security Advisory (MFSA2025-64) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-64. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Amazon Linux 2 : libxslt (ALAS-2025-2966)

The version of libxslt installed on the remote host is prior to 1.1.28-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2966 advisory. A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead t...

GLSA-202508-02 : GPL Ghostscript: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202508-02 GPL Ghostscript: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description...

Amazon Linux 2 : kernel, --advisory ALAS2-2025-2944 (ALAS-2025-2944)

The version of kernel installed on the remote host is prior to 4.14.355-280.652. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2944 advisory. In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in...

Medium: perl-Crypt-OpenSSL-RSA

Issue Overview: A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial...

Medium: python-pip

Issue Overview: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An...

Medium: gimp

Issue Overview: GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash. CVE-2022-30067 Affected Packages: gimp Note: This advisory is applicable to Amazon Linu...

Medium: python-pip

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

GLSA-202507-03 : ClamAV: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202507-03 ClamAV: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fro...

GLSA-202506-11 : YAML-LibYAML: Shell injection

The remote host is affected by the vulnerability described in GLSA-202506-11 YAML-LibYAML: Shell injection YAML-LibYAML uses the legacy '2-arg' open call which is susceptible to shell injection via malicious filenames. Tenable has extracted the preceding description block directly from the Gentoo...

Medium: python-requests

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

TencentOS Server 4: cjson (TSSA-2024:0946)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0946 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Medium: qt

Issue Overview: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion. CVE-2023-38197 Affected Packages: qt Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this F...

Medium: microcode_ctl

Issue Overview: A potential security vulnerability in some Intelr Processors may allow information disclosure. Intel is releasing microcode updates and prescriptive guidance to mitigate this potential vulnerability. Info:...

Medium: python-requests

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

[ASA-202505-12] go: directory traversal

Arch Linux Security Advisory ASA-202505-12 ========================================== Severity: Low Date : 2025-05-19 CVE-ID : CVE-2025-22873 Package : go Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-2878 Summary ======= The package go before version 2:1.24.3-1...

GLSA-202505-07 : FreeType: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202505-07 FreeType: Remote Code Execution Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fr...

GLSA-202505-11 : Node.js: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202505-11 Node.js: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...