openSUSE Security Advisory (SUSE-SU-2025:02679-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Maximo Application Suite uses multiple nodejs and go packages which is vulnerable to " CVE-2025-27152, CVE-2025-32996, CVE-2025-32997, CVE-2025-22871"

Summary IBM Maximo Application Suite uses " axios, http-proxy-middleware and net/http package " which is vulnerable to "CVE-2025-27152, CVE-2025-32996, CVE-2025-32997, CVE-2025-22871". This bulletin contains information regarding the vulnerability and how to address it. Vulnerability Details...

SUSE SLES15: suse-manager-5.0-aarch64-proxy-httpd-image / etc (SUSE-SU-2025:02478-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02478-1 advisory. proxy-helm: - Version 5.0.15: Image rebuilt to the newest version with updated dependencies proxy-httpd-image: - Version 5.0.13: Add redirect of API...

GHSA-XFFM-G5W8-QVG7 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

SUSE SLES15: python311-salt / salt / salt-api / salt-bash-completion / salt-doc / etc (SUSE-SU-2025:02502-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02502-1 advisory. - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability to replay...

GHSA-GHFM-8RWR-P3HR vulnerabilities

Vulnerabilities for packages: ceph...

Fedora 43 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-203b7db566)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-203b7db566 advisory. https://fedoraproject.org/wiki/Changes/RubyonRails8.0 Tenable has extracted the preceding description block directly from the Fedora security...

GHSA-5HQ9-5R78-2GJH vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2025-32910 affecting package libsoup for versions less than 3.0.4-7

CVE-2025-32910 affecting package libsoup for versions less than 3.0.4-7. A patched version of the package is available...

CVE-2025-22872 affecting package multus for versions less than 4.0.2-8

CVE-2025-22872 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

Oracle Linux 10 : kernel (ELSA-2025-9348)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9348 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

GHSA-695J-C63M-MVXC vulnerabilities

Vulnerabilities for packages: sudo...

GHSA-3V48-283X-F2W4 vulnerabilities

Vulnerabilities for packages: filebrowser...

Ubuntu: Security Advisory (USN-7603-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:02158-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-7RWH-Q57W-MHC9 vulnerabilities

Vulnerabilities for packages: chromium...

SUSE SLED15: icu / libicu-devel / libicu-devel-32bit / libicu-doc / etc (SUSE-SU-2025:02079-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02079-1 advisory. - CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function bsc1243721. Tenable has...

Photon OS 5.0: Linux PHSA-2025-5.0-0538

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Debian dla-4223 : debian-security-support - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4223 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4223-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to multiple Vulnerabilities due to Ruby package

Summary Potential vulnerabilities in Ruby package has been identified that may affect IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2020-10663 DESCRIPTION: The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through...