CBL Mariner 2.0 Security Update: python3 (CVE-2025-50181)

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-50181 advisory. - urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable...

SUSE SLES15: kubernetes1.25-apiserver / kubernetes1.25-client / etc (SUSE-SU-2025:02351-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02351-1 advisory. - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865. Tenable has...

Edimax IC-7100 RCE (CVE-2025-1316)

Edimax IC-7100 network cameras do not properly neutralize request. An attacker can create specially crafted requests to achieve remote code execution on the device. Note that Nessus has not tested for this issue and has relied only on the device's self-reported model number. %NASLMINLEVEL 80900 C...

CBL Mariner 2.0 Security Update: sudo (CVE-2025-32462)

The version of sudo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32462 advisory. - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor...

Security Updates for Microsoft SQL Server (July 2025)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

KB5062552: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (July 2025)

The remote Windows host is missing security update 5062552. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...

Model Context Protocol (MCP) Python Library Detection

An Model Context Protocol Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid241433; scriptversion"1.7";...

Fedora 43 : ov (2025-c4c8863fd7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c4c8863fd7 advisory. Automatic update for ov-0.42.1-1.fc43. Changelog Fri Jul 4 2025 Mikel Olasagasti Uranga - 0.42.1-1 - Update to 0.42.1 and go-vendor-tools. Closes rhbz2348375...

ManageEngine Exchange Reporter Plus Multiple Vulnerabilities

The version of ManageEngine Exchange Reporter Plus on the host is prior to 5723. It is, therefore, affected by multiple XSS vulnerabilities - Zohocorp ManageEngine Exchange Reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report. CVE-2025-59...

Fedora 42 : moodle (2025-83ab16425f)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-83ab16425f advisory. 4.5.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Fedora 42 : mediawiki (2025-01bd4e4d20)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-01bd4e4d20 advisory. https://lists.wikimedia.org/hyperkitty/list/mediawiki- [email protected]/thread/OXIGQIHBL26HFKG6TT5SWSH7K7W6RO4H/...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : yelp-xsl (SUSE-SU-2025:02168-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02168-1 advisory. - CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files...

Fedora 42 : dotnet9.0 (2025-77d16adbcd)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-77d16adbcd advisory. This is the .NET monthly update for June 2025. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.6/9.0.107.md - Runtime:...

Fedora 41 : moodle (2025-622bed7e7a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-622bed7e7a advisory. 4.4.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Oracle Linux 10 : sqlite (ELSA-2025-7517)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7517 advisory. - Fix for CVE-2025-3277 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

EulerOS 2.0 SP13 : glibc (EulerOS-SA-2025-1615)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message stri...

KB5060533: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (June 2025)

The remote Windows host is missing security update 5060533. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-33066 - Improper access contro...

NewStart CGSL MAIN 7.02 : ImageMagick Vulnerability (NS-SA-2025-0088)

The remote NewStart CGSL host, running version MAIN 7.02, has ImageMagick packages installed that are affected by a vulnerability: - A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. CVE-2023-5341 Note that Nessus has not tested for these issues but has instead relied only on t...

NewStart CGSL MAIN 7.02 : libxml2 Vulnerability (NS-SA-2025-0072)

The remote NewStart CGSL host, running version MAIN 7.02, has libxml2 packages installed that are affected by a vulnerability: - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. CVE-2025-27113 Note that Nessus has not tested for these...

Fedora 42 : chromium (2025-bc0d109630)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bc0d109630 advisory. Update to 137.0.7151.68 CVE-2025-5419: Out of bounds read and write in V8 CVE-2025-5068: Use after free in Blink Tenable has extracted the preceding...