NVIDIA Virtual GPU Manager Multiple Vulnerabilities (October 2025)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by a vulnerability where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2025-61454

creationtimestamp| type| source ---|---|--- 2025-10-14 21:00:05+00:00| published-proof-of-concept| Telegram/e-NDV7JUXFjV7ZYm9JMRokEu-SU9MarRYVSx0rnLWFHt3U 2025-10-20 15:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3n4iy2nng2o 2025-10-22 21:02:35+00:00| seen|...

CVE-2025-6985

creationtimestamp| type| source ---|---|--- 2025-10-14 04:36:10+00:00| seen| https://t.me/bhhub/1168 2026-07-26 07:01:47+00:00| seen| https://t.me/zhatez/2283 2026-07-27 00:01:31+00:00| seen| https://t.me/zhatez/2283 2026-07-28 23:00:04+00:00| seen| https://t.me/zhatez/2283 2026-07-29...

EUVD-2016-10339

Malware in sbrugna...

Grafana 12.1.x < 12.1.2 Multiples Vulnerabilities

According to its self-reported version, the Grafana install hosted on the remote host is prior to 11.3.8, or 11.4.x prior to 11.4.6, or 11.5.x prior to 11.5.6, or 11.6.x prior to 11.6.3, or 12.0.x prior to 12.0.2, or 12.1.x prior to 12.1.2. It is, therefore, affected by multiples vulnerabilities....

Grafana 11.4.x < 11.4.6 Multiples Vulnerabilities

According to its self-reported version, the Grafana install hosted on the remote host is prior to 11.3.8, or 11.4.x prior to 11.4.6, or 11.5.x prior to 11.5.6, or 11.6.x prior to 11.6.3, or 12.0.x prior to 12.0.2, or 12.1.x prior to 12.1.2. It is, therefore, affected by multiples vulnerabilities....

EUVD-2025-5254

Malicious code in bioql PyPI...

CVE-2025-58775

creationtimestamp| type| source ---|---|--- 2025-10-02 06:04:14+00:00| seen| Telegram/BwsrwyFRjJnrX520whsfwM9iuGfUywjZCoBkzu1nWBF5w...

RHSA-2024:4619

creationtimestamp| type| source ---|---|--- 2025-10-01 09:00:27+00:00| seen| Telegram/-h2tA7k5LBgvws531-LzQjYT1zC4XZfun-87EvnaObsJ2E...

RHSA-2024:1883

creationtimestamp| type| source ---|---|--- 2025-10-01 09:00:19+00:00| seen| Telegram/HOI9RhqBej92SEDYPeYOufaX9SS-ALTRn7qub0MNpF0T4 2025-10-01 09:00:21+00:00| seen| Telegram/T18PCyJX5gS6gcDXW3dVGKsiGFXlCyqv6FilSSHPuh1hqZ4 2025-10-01 09:00:22+00:00| seen|...

Fedora 42 : firebird (2025-d24499a627)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d24499a627 advisory. 4.0.6.3221 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for the...

Cisco SD-WAN vEdge Software Access Control List Bypass (cisco-sa-defaultacl-pSJk9nVF)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Dotnetnuke < 10.1.0 Stored Cross-Site Scripting (XSS) in Prompt module (CVE-2025-59545)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.1.0. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Fedora 41 : gh (2025-24e111e6f1)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-24e111e6f1 advisory. Update to 2.79.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2024-13174

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection.This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...

Jenkins LTS < 2.516.3 / Jenkins weekly < 2.528 Multiple Vulnerabilities

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.516.3 or Jenkins weekly prior to 2.528. It is, therefore, affected by multiple vulnerabilities: - In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21,...

CVE-2023-53186

creationtimestamp| type| source ---|---|--- 2025-09-15 14:45:44+00:00| seen| https://gist.github.com/Darkcrai86/64fb5bf5d6c6621f71f5416b13e99774...

Security Updates for Microsoft Visio Products C2R (September 2025)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by a remote code execution vulnerability that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relied on...

Linux Distros Unpatched Vulnerability : CVE-2015-1343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of unity-scope-gdrive logs search terms to syslog. CVE-2015-1343 Note that Nessus relies on the presence of the package as reported by the vendor...

WordPress 69 Clothing Theme <= 1.2.11 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme 69 Clothing versions = 1.2.11...