981 matches found
Oracle Linux 9 : php:8.1 (ELSA-2025-4263)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4263 advisory. php 8.1.32-1 - rebase to 8.1.32 php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip: Tenable has extracted the preceding description block directl...
openSUSE Security Advisory (SUSE-SU-2025:1359-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-4134 : fig2dev - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4134 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4134-1 [email protected]...
Fedora: Security Advisory (FEDORA-2025-472776e5dc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Service Call functionality. A user with sufficient privileges to create Kyverno policies can expose all data from a Kubernetes cluster using a malicious Kyverno policy that makes external service cal...
CVE-2025-2588 affecting package augeas for versions less than 1.12.0-6
CVE-2025-2588 affecting package augeas for versions less than 1.12.0-6. A patched version of the package is available...
Fedora: Security Advisory (FEDORA-2025-cef83410f7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-30204 affecting package telegraf for versions less than 1.29.4-13
CVE-2025-30204 affecting package telegraf for versions less than 1.29.4-13. A patched version of the package is available...
CVE-2024-28863 affecting package reaper for versions less than 3.1.1-17
CVE-2024-28863 affecting package reaper for versions less than 3.1.1-17. A patched version of the package is available...
SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:0876-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0876-1 advisory. - Update to version 0.0.20250313T170021 2025-03-13T17:00:21Z jscPED-11136 GO-2025-3427 GO-2025-3442 GO-2025-3443 GO-2025-3508 GO-2025-3509...
MAL-2025-2539 Malicious code in @brix-crypto/crypto-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7667e8bc15f436605e7a5f94dbf1a1d0534b380ead2a777826cc73ad68cf586 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Slackware: Security Advisory (SSA:2025-072-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-26597 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-1
CVE-2025-26597 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-1. An upgraded version of the package is available that resolves this issue...
Ubuntu: Security Advisory (USN-7338-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-19
CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-19. A patched version of the package is available...
Fedora 40 : wireshark (2025-04475838f9)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-04475838f9 advisory. New version 4.2.11 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
openSUSE Security Advisory (SUSE-SU-2024:2875-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:0297-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0297-1 advisory. - Update to version 0.0.20250128T150132 2025-01-28T15:01:32Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated...
Malicious code in airbnb-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5dbe417775cdf936de0b309b6f15596072d0e6111399a3f24d499f98f0fde022 The OpenSSF Package Analysis project identified 'airbnb-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...