Fedora 41 : mod_auth_openidc (2025-be0c6f25ce)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-be0c6f25ce advisory. Rebase to new version resolves CVE-2025-31492 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

MINI-XF92-2Q3Q-28QP

Bulletin has no description...

IBM MQ REST API and Console Installed (Linux)

Binary data ibmmqwebrestapinixinstalled.nbin...

CGA-64M7-QJP3-HVHV

Bulletin has no description...

CGA-Q8MH-86HQ-8J7V

Bulletin has no description...

CGA-7R8G-63QW-P9CF

Bulletin has no description...

CVE-2010-20122

Xftp FTP Client version up to and including 3.0 build 0238 contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory string in response to the PWD command, the...

CVE-2010-20122 Xftp FTP Client <= 3.0 PWD Response Buffer Overflow

Xftp FTP Client version up to and including 3.0 build 0238 contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory string in response to the PWD command, the...

Linux Distros Unpatched Vulnerability : CVE-2023-34053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS...

GHSA-9X9C-GHC5-JHW9

creationtimestamp| type| source ---|---|--- 2025-08-15 15:34:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115033509822272775...

Linux Distros Unpatched Vulnerability : CVE-2024-46792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory rawcopyto,fromuser do not call...

Malicious code in @zalastax/nolb-_uq (npm)

The package @zalastax/nolb-uq was found to contain malicious code...

Malicious code in saffron_vlrfe_de9i9_aurora (npm)

The package saffronvlrfede9i9aurora was found to contain malicious code...

Malicious code in @zalastax/nolb-ngx6 (npm)

The package @zalastax/nolb-ngx6 was found to contain malicious code...

MAL-2025-12262 Malicious code in @zalastax/nolb-lione (npm)

The package @zalastax/nolb-lione was found to contain malicious code...

MAL-2025-30028 Malicious code in project-bk1h5-india (npm)

The package project-bk1h5-india was found to contain malicious code...

MAL-2025-38847 Malicious code in watermelon-almond-gf7n (npm)

The package watermelon-almond-gf7n was found to contain malicious code...

Malicious code in @zalastax/nolb-axk (npm)

The package @zalastax/nolb-axk was found to contain malicious code...

MAL-2025-14585 Malicious code in antares-stratosphere-darkmatter-oscillation (npm)

The package antares-stratosphere-darkmatter-oscillation was found to contain malicious code...

MAL-2025-7832 Malicious code in @dramateas/veritatis-quidem-quis-odit (npm)

The package @dramateas/veritatis-quidem-quis-odit was found to contain malicious code...