Fedora 41 : fscrypt (2025-fc7c0ca5c5)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-fc7c0ca5c5 advisory. Update to 0.3.5 to fix FTBFS and test failures Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2025-27111 Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This vulnerability is fixed...

CVE-2025-1933

On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

Linux Distros Unpatched Vulnerability : CVE-2020-1472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the...

Updated x11-server, x11-server-xwayland & tigervnc packages fix security vulnerabilities

Use-after-free of the root cursor. CVE-2025-26594 Buffer overflow in XkbVModMaskText. CVE-2025-26595 Heap overflow in XkbWriteKeySyms. CVE-2025-26596 Buffer overflow in XkbChangeTypesOfKey. CVE-2025-26597 Out-of-bounds write in CreatePointerBarrierClient. CVE-2025-26598 Use of uninitialized point...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHSA-2025:1958 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

Oracle Linux 9 : webkit2gtk3 (ELSA-2025-2035)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2035 advisory. 2.46.6-1 - Update to 2.46.6 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

HP ThinPro 8.1 SP6 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP6 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP6, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as part of...

Ubuntu: Security Advisory (USN-7310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : webkit2gtk3 (ELSA-2025-2034)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2034 advisory. 2.46.6-1 - Update to 2.46.6 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Updated ffmpeg packages fix security vulnerabilities

A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service DoS via opening a crafted AAC file. CVE-2025-22919 A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplyin...

CVE-2025-21783

In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix crash on error in gpiochipgetngpios The gpiochipgetngpios uses chip macros to print messages. However these macros rely on gpiodev to be initialised and set, which is not the case when called via bgpioinit. In such a...

Photon OS 4.0: Xerces PHSA-2025-4.0-0761

An update of the xerces package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0761. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Xerces PHSA-2025-5.0-0480

An update of the xerces package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0480. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Iniparser PHSA-2025-5.0-0480

An update of the iniparser package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0480. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Curl PHSA-2025-5.0-0479

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0479. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Ubuntu 20.04 LTS : Git vulnerabilities (USN-7207-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7207-2 advisory. USN-7207-1 fixed vulnerabilities in Git. This update provides the corresponding updates for Ubuntu 20.04 LTS. Tenable has extracted the preceding...

CVE-2024-50686

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-26 23:33:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jztqs6j22 2025-02-27 00:19:28+00:00| seen| https://t.me/cvedetector/189...

CVE-2022-49572

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpslowstartafteridle. While reading sysctltcpslowstartafteridle, it can be changed concurrently. Thus, we need to add READONCE to its readers...