GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: zot, eksctl, linkerd2, k3s, kargo, buildkitd, cluster-api-helm-controller, zarf, docker-cli-buildx, spegel, newrelic-infrastructure-agent, wolfictl, fuse-overlayfs-snapshotter, kubescape, rancher-fleet, k8ssandra-client, cilium-cli, flux-helm-controller, syft,...

Fedora 41 : tigervnc (2025-96f8a2da96)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-96f8a2da96 advisory. Tigervnc 1.15.0 update. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56634)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56634 advisory. - In the Linux kernel, the following vulnerability has been resolved: gpio: grgpio: Add NULL check in...

CBL Mariner 2.0 Security Update: clang16 / llvm16 / tensorflow (CVE-2023-29941)

The version of clang16 / llvm16 / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29941 advisory. - llvm-project commit a0138390 was discovered to contain a segmentation fault via the...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56602)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56602 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling...

Azure Linux 3.0 Security Update: qt5-qtbase / qtbase (CVE-2024-25580)

The version of qt5-qtbase / qtbase installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25580 advisory. - An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12,...

CBL Mariner 2.0 Security Update: qt5-qtbase (CVE-2023-34410)

The version of qt5-qtbase installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-34410 advisory. - An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56781)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56781 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/prominit: Fixup missing powermac...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56626)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56626 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in...

Fedora 40 : radare2 (2025-f8eca89d63)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f8eca89d63 advisory. fix CVE-2024-56737, CVE-2025-56737, CVE-2025-1864 ---- Fix CVE-2025-1744 and CVE-2025-1864 Tenable has extracted the preceding description block...

CBL Mariner 2.0 Security Update: libarchive (CVE-2025-25724)

The version of libarchive installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-25724 advisory. - listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which...

Azure Linux 3.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26594)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26594 advisory. - A use-after-free flaw was found in X.Org and Xwayland. The root cursor i...

CBL Mariner 2.0 Security Update: clang16 / llvm16 (CVE-2023-29933)

The version of clang16 / llvm16 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29933 advisory. - llvm-project commit bd456297 was discovered to contain a segmentation fault via the component...

Azure Linux 3.0 Security Update: libxml2 (CVE-2025-27113)

The version of libxml2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27113 advisory. - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c...

ISLOnline ISL Light Client Installed (Linux)

Binary data islonlineisllightclientnixinstalled.nbin...

Schneider Electric End-of-Life Devices Detection

The current plugin identifies Schneider devices that are end-of-life, i.e., still supported but have a discontinued date announced. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and...

RockyLinux 9 : perl-App-cpanminus (RLSA-2024:10218)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:10218 advisory. perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability CVE-2024-45321 Tenable has extracted the preceding description block...

RockyLinux 9 : keepalived (RLSA-2025:0917)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0917 advisory. keepalived: Integer overflow vulnerability in vrrpipsetshandler CVE-2024-41184 Tenable has extracted the preceding description block directly from the RockyLinux...

RockyLinux 9 : gcc (RLSA-2025:1346)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1346 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly...

RockyLinux 9 : doxygen (RLSA-2025:1329)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1329 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly...