13661 matches found
Fedora 42 : LabPlot / dtk6core / dtk6gui / dtk6log / dtk6widget / fcitx5-qt / etc (2025-c546fd3f09)
The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-c546fd3f09 advisory. Qt 6.9.1 bugfix release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Security Updates for Microsoft Visual Studio 2022/2019 Products (May 2025)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by network spoofing vulnerability where External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1662)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: gso: fix ownership in udpgsosegmentCVE-2025-21926 usbnet: gl620a: fix endpoint checking in genelinkbind.CVE-2025-21877 netsched: Prevent...
Fedora 42 : mozilla-ublock-origin (2025-01794be9b3)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-01794be9b3 advisory. Latest upstream release. Changelog: https://github.com/gorhill/uBlock/releases/tag/1.64.0 . Fixes CVE-2025-4215 . Tenable has extracted the preceding...
Fedora 42 : gh (2025-82ac5e4065)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-82ac5e4065 advisory. Update to 2.74.0 - Fixes CVE-2025-48938 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Photon OS 4.0: Vim PHSA-2025-4.0-0812
An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0812. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid23829...
MGASA-2025-0186 Updated mariadb packages fix security vulnerabilities
MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to makeaggrtablesinfo and optimizestage2 - CVE-2023-52969. MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through...
CVE-2025-4922
Nomad Community and Nomad Enterprise “Nomad” prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enterprise 1.10.2, 1.9.10, and 1.8.14...
KLA84828 OSI vulnerability in Microsoft Apps
An information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-32711 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-32711...
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-1620)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jun 2025)
This host is missing a critical security update according to Microsoft Office Click-to-Run update June 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in several Developer Tools. A malicious person could exploit the vulnerabilities to execute arbitrary code with victim privileges. Since it cannot be ruled out that developers work with elevated privileges, it is plausible that execution of arbitrary code could...
TPM 2.0 Reference Code Vulnerability – Firmware TPMs - Lenovo Support US
No description provided...
CVE-2025-49142 Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating
Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot, a...
CVE-2025-47166
creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:27:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbmr6imac2c 2025-06-10 23:33:06+00:00| seen|...
Vulnerabilities fixed in Siemens products
Siemens has fixed vulnerabilities in several products such as RUGGEDCOM, SCALANCE, SIMATIC and Tecnomatix The vulnerabilities potentially enable a malicious person to carry out attacks that could lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data -...
June 10, 2025—Hotpatch KB5060841 (OS Build 26100.4270) for Windows Server
None None...
May 13, 2025—KB5058451 (Monthly Rollup)
None None...