ROS-20250710-05

The vulnerability in the Perl programming language is due to the fact that the software uses the function rand as the default entropy source, which is not cryptographically secure. Exploitation of the vulnerability could allow an attacker to bypass the implemented security restrictions...

Oracle Linux 7 : perl-File-Find-Rule (ELSA-2025-9741)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9741 advisory. 0.33-5.0.1 - Use 3 arg open in grep Orabug: 38120380CVE-2011-10007 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Ubuntu: Security Advisory (USN-7632-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7632-1 libyaml-libyaml-perl vulnerability

It was discovered that YAML-LibYAML incorrectly handled certain file names. An attacker could possibly use this issue to overwrite arbitrary files...

Oracle Linux 7 : perl-File-Find-Rule-Perl (ELSA-2025-9740)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9740 advisory. 1.13-2.0.1 - Use 3 arg open in grep Orabug: 38120371CVE-2011-10007 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Multiple vulnerabilities detected in PostgreSQL

Multiple PostgreSQL vulnerability updates CVE-2025-1094-PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2024-10979-PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10978-PostgreSQL SET ROLE, SET SESSION AUTHORIZATI...

perl-File-Find-Rule-Perl security update

1.13-2.0.1 - Use 3 arg open in grep Orabug: 38120371CVE-2011-10007...

Ubuntu: Security Advisory (USN-7620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

perl-CryptX-0.87.0-1.1 on GA media (moderate)

perl-CryptX-0.87.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15259-1 Rating: moderate Cross-References: CVE-2025-40914 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

perl-File-Find-Rule-0.350.0-1.1 on GA media (moderate)

perl-File-Find-Rule-0.350.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15260-1 Rating: moderate Cross-References: CVE-2011-10007 CVSS scores: CVE-2011-10007 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2011-10007 SUSE : 8.6...

perl-YAML-LibYAML-0.904.0-2.1 on GA media (moderate)

perl-YAML-LibYAML-0.904.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15261-1 Rating: moderate Cross-References: CVE-2025-40908 CVSS scores: CVE-2025-40908 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-40908 SUSE : 8.3...

perl-32bit-5.40.2-3.1 on GA media (moderate)

perl-32bit-5.40.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15258-1 Rating: moderate Cross-References: CVE-2025-40909 CVSS scores: CVE-2025-40909 SUSE : 6.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...

OPENSUSE-SU-2025:15259-1 perl-CryptX-0.87.0-1.1 on GA media

These are all security issues fixed in the perl-CryptX-0.87.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15261-1 perl-YAML-LibYAML-0.904.0-2.1 on GA media

These are all security issues fixed in the perl-YAML-LibYAML-0.904.0-2.1 package on the GA media of openSUSE Tumbleweed...

AlmaLinux 9 : perl-FCGI (ALSA-2025:8635)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:8635 advisory. perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library CVE-2025-40907 Tenable has extracted the...

OPENSUSE-SU-2025:15258-1 perl-32bit-5.40.2-3.1 on GA media

These are all security issues fixed in the perl-32bit-5.40.2-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15260-1 perl-File-Find-Rule-0.350.0-1.1 on GA media

These are all security issues fixed in the perl-File-Find-Rule-0.350.0-1.1 package on the GA media of openSUSE Tumbleweed...

AlmaLinux 9 : perl-YAML-LibYAML (ALSA-2025:9330)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:9330 advisory. yaml-libyaml: LibYAML Perl File Modification Vulnerability CVE-2025-40908 Tenable has extracted the preceding description block directly from the AlmaLinux securit...

AlmaLinux 8 : perl-FCGI:0.78 (ALSA-2025:8696)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:8696 advisory. perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library CVE-2025-40907 Tenable has extracted the...

AlmaLinux 9 : perl-Module-ScanDeps (ALSA-2025:7350)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:7350 advisory. module-scandeps: local privilege escalation via unsanitized input CVE-2024-10224 Tenable has extracted the preceding description block directly from the AlmaLinux...