Linux Distros Unpatched Vulnerability : CVE-2025-37942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUSMAX As noted by Anssi some 20 years ago, pool report is sometimes messed up. This worked fine on...

Linux Distros Unpatched Vulnerability : CVE-2019-17015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the...

Linux Distros Unpatched Vulnerability : CVE-2021-47569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring: fail cancellation for EXITING tasks WARNING: CPU: 1 PID: 20 at fs/iouring.c:6269...

Linux Distros Unpatched Vulnerability : CVE-2019-19043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak in the i40esetupmacvlans function in drivers/net/ethernet/intel/i40e/i40emain.c in the Linux kernel through 5.3.11 allows attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2025-38071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm: Check return value from memblockphysallocrange At least with CONFIGPHYSICALSTART=0x100000, if there is 4 MiB of contiguous free memory available at this...

Linux Distros Unpatched Vulnerability : CVE-2024-27390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronizenet barrier in ipv6mcdown As discussed in the past commit...

Linux Distros Unpatched Vulnerability : CVE-2023-52987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-mtrace: prevent underflow in sofipc4prioritymaskdfswrite The id comes from t...

Linux Distros Unpatched Vulnerability : CVE-2021-47431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix gart.bo pincount leak gmcv9,100gartdisable isn't called matched with correspoding gartenbale function in SRIOV case. This will lead to gart.bo...

Amazon Linux 2 : python-pip (ALAS-2025-2935)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2935 advisory. urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable...

CBL Mariner 2.0 Security Update: python3 (CVE-2025-50181)

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-50181 advisory. - urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable...

SUSE SLES15: kubernetes1.25-apiserver / kubernetes1.25-client / etc (SUSE-SU-2025:02351-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02351-1 advisory. - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865. Tenable has...

Edimax IC-7100 RCE (CVE-2025-1316)

Edimax IC-7100 network cameras do not properly neutralize request. An attacker can create specially crafted requests to achieve remote code execution on the device. Note that Nessus has not tested for this issue and has relied only on the device's self-reported model number. %NASLMINLEVEL 80900 C...

CBL Mariner 2.0 Security Update: sudo (CVE-2025-32462)

The version of sudo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32462 advisory. - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor...

Security Updates for Microsoft SQL Server (July 2025)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

KB5062552: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (July 2025)

The remote Windows host is missing security update 5062552. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...

Model Context Protocol (MCP) Python Library Detection

An Model Context Protocol Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid241433; scriptversion"1.7";...

Fedora 43 : ov (2025-c4c8863fd7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c4c8863fd7 advisory. Automatic update for ov-0.42.1-1.fc43. Changelog Fri Jul 4 2025 Mikel Olasagasti Uranga - 0.42.1-1 - Update to 0.42.1 and go-vendor-tools. Closes rhbz2348375...

ManageEngine Exchange Reporter Plus Multiple Vulnerabilities

The version of ManageEngine Exchange Reporter Plus on the host is prior to 5723. It is, therefore, affected by multiple XSS vulnerabilities - Zohocorp ManageEngine Exchange Reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report. CVE-2025-59...

Fedora 42 : mediawiki (2025-01bd4e4d20)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-01bd4e4d20 advisory. https://lists.wikimedia.org/hyperkitty/list/mediawiki- [email protected]/thread/OXIGQIHBL26HFKG6TT5SWSH7K7W6RO4H/...

Fedora 42 : moodle (2025-83ab16425f)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-83ab16425f advisory. 4.5.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...