3280 matches found
Fedora 42 : python3.14 (2025-d5dffbf048)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d5dffbf048 advisory. This is the second maintenance release of Python 3.14 Tenable has extracted the preceding description block directly from the Fedora security...
Fedora 43 : golangci-lint (2025-cc4c533b49)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cc4c533b49 advisory. Latest version - This build with the latest golang should also fix all the Go CVEs, although I did verify how/if this package is affected by these...
Improper Input Validation
mantisbt/mantisbt is vulnerable to improper input validation. The vulnerability is due to lack of server-side validation on note length, which allows an attacker to submit excessively long notes and corrupt the issue activity logs, thereby breaking the activity stream UI and preventing future...
SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2025:4373-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4373-1 advisory. This update for container-suseconnect rebuilds it against current go security release. Tenable has extracted the preceding description block...
Fedora 43 : yarnpkg (2025-de6cf573f0)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-de6cf573f0 advisory. Fix CVE-2205-64756. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...
Zoom Rooms < 6.6.0 Vulnerability (ZSB-25051)
The version of Zoom Rooms installed on the remote host is prior to 6.6.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25051 advisory. - External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a...
Fedora 43 : apptainer (2025-cf169a01e8)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-cf169a01e8 advisory. Apply fuse2fs patches that were accidentally empty ---- Update to upstream 1.4.5, including a fix for CVE-2025-65105 Tenable has extracted the preceding...
Exploit for Deserialization of Untrusted Data in Facebook React
$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...
Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2025-345-01)
The version of mozilla-thunderbird installed on the remote host is prior to 140.6.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-345-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...
Exploit for Deserialization of Untrusted Data in Facebook React
This is a Next.js project bootstrapped wit...
MINI-PF63-PXQ4-GC52
Bulletin has no description...
CVE-2025-67488 SiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE
SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-20251202123337-6ef83b42c7ce and below contain function importZipMd which is vulnerable to ZipSlips, allowing an authenticated user to overwrite files on the system. An authenticated user with access to the...
CVE-2025-14325
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...
CVE-2023-53825
A memory leak and queue corruption vulnerability was found in the Kernel Connection Multiplexor KCM implementation in the Linux kernel. In kcmsendmsg for SOCKDGRAM sockets, when an error occurs during send, the MSGMORE queue is not properly purged. This leads to memory leaks and corrupted queue...
firefox: thunderbird: Mitigation bypass in the DOM: Core & HTML component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Core & HTML component...
Fedora 42 : tinygltf (2025-ac8ed4a110)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ac8ed4a110 advisory. Update to 2.9.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
CVE-2025-45311
Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is...
Exploit for CVE-2025-55182
🔔 ⚠️Unauthorized penetratio...
Fedora 43 : gi-loadouts / kf6-kcoreaddons / kf6-kguiaddons / kf6-kjobwidgets / etc (2025-0cc929ff17)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-0cc929ff17 advisory. PySide6 6.10.1 update. ---- Pyside6 6.10.1 release. ---- Rebuilt with stbimage patched for two new security bugs. Tenable has extracted the preceding...
