CVE-2024-28607

The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via a falsy isPrivate return value...

MAL-2025-2410 Malicious code in request-draft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20e7c9b27e44bc6a2f406fc1638d5949e6a8ff79801714031432723b004872d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 40 : iniparser (2025-257f422587)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-257f422587 advisory. Patched libiniparser to fix CVE-2025-0633 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2024-56614 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56614 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-25204 affecting package gh for versions less than 2.62.0-6

CVE-2025-25204 affecting package gh for versions less than 2.62.0-6. A patched version of the package is available...

CVE-2025-27144 affecting package containerized-data-importer for versions less than 1.57.0-13

CVE-2025-27144 affecting package containerized-data-importer for versions less than 1.57.0-13. A patched version of the package is available...

CVE-2025-27144 affecting package keda for versions less than 2.14.1-3

CVE-2025-27144 affecting package keda for versions less than 2.14.1-3. A patched version of the package is available...

CVE-2025-22868 affecting package keda for versions less than 2.14.1-3

CVE-2025-22868 affecting package keda for versions less than 2.14.1-3. A patched version of the package is available...

CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10

CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10. A patched version of the package is available...

openSUSE 15 Security Update : ark (openSUSE-SU-2025:0090-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0090-1 advisory. - CVE-2024-57966: Disable extraction to absolute path from an archive boo1236737 Tenable has extracted the preceding description block directly from the...

CVE-2025-27144 affecting package skopeo for versions less than 1.14.2-10

CVE-2025-27144 affecting package skopeo for versions less than 1.14.2-10. A patched version of the package is available...

Photon OS 4.0: Linux PHSA-2025-4.0-0764

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0764. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-57938 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-57938 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56724 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56724 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-53157 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-53157 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2024-49873

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/filemap: fix filemapgetfolioscontig THP panic Patch series memfd-pin huge page fixes. Fi...

Linux Distros Unpatched Vulnerability : CVE-2024-50131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen returns a strin...

Linux Distros Unpatched Vulnerability : CVE-2024-8383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does not support. It did no...

Linux Distros Unpatched Vulnerability : CVE-2024-53220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to account dirty data in getsecsrequired It will trigger system panic w/ testcase in 1: ------------ cut here ------------ kernel BUG at...

Linux Distros Unpatched Vulnerability : CVE-2024-23206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, mac...