Fedora: Security Advisory (FEDORA-2024-4f08c1a90a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in ghpglobaldata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f6628f3ea3766cb44c71cab1c1a8301235db7c97a186af48166d59c09863c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

OPENSUSE-SU-2025:15099-1 python311-nltk-3.9.1-2.4 on GA media

These are all security issues fixed in the python311-nltk-3.9.1-2.4 package on the GA media of openSUSE Tumbleweed...

CVE-2016-9842 affecting package fltk for versions less than 1.3.8-1

CVE-2016-9842 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-31618 affecting package mod_http2 for versions less than 2.0.29-3

CVE-2021-31618 affecting package modhttp2 for versions less than 2.0.29-3. An upgraded version of the package is available that resolves this issue...

Debian: Security Advisory (DLA-4164-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15051-1 chromedriver-136.0.7103.59-1.1 on GA media

These are all security issues fixed in the chromedriver-136.0.7103.59-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 9 : php:8.1 (ELSA-2025-4263)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4263 advisory. php 8.1.32-1 - rebase to 8.1.32 php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip: Tenable has extracted the preceding description block directl...

openSUSE Security Advisory (SUSE-SU-2025:1359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4134 : fig2dev - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4134 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4134-1 [email protected]...

Fedora: Security Advisory (FEDORA-2025-472776e5dc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Service Call functionality. A user with sufficient privileges to create Kyverno policies can expose all data from a Kubernetes cluster using a malicious Kyverno policy that makes external service cal...

CVE-2025-2588 affecting package augeas for versions less than 1.12.0-6

CVE-2025-2588 affecting package augeas for versions less than 1.12.0-6. A patched version of the package is available...

Fedora: Security Advisory (FEDORA-2025-cef83410f7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-30204 affecting package telegraf for versions less than 1.29.4-13

CVE-2025-30204 affecting package telegraf for versions less than 1.29.4-13. A patched version of the package is available...

CVE-2024-28863 affecting package reaper for versions less than 3.1.1-17

CVE-2024-28863 affecting package reaper for versions less than 3.1.1-17. A patched version of the package is available...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:0876-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0876-1 advisory. - Update to version 0.0.20250313T170021 2025-03-13T17:00:21Z jscPED-11136 GO-2025-3427 GO-2025-3442 GO-2025-3443 GO-2025-3508 GO-2025-3509...

MAL-2025-2539 Malicious code in @brix-crypto/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7667e8bc15f436605e7a5f94dbf1a1d0534b380ead2a777826cc73ad68cf586 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Slackware: Security Advisory (SSA:2025-072-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...