Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Docker vulnerabilities (USN-7161-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7161-2 advisory. USN-7161-1 fixed CVE-2024-29018 in Ubuntu 24.04 LTS. This update fixes it in Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubun...

SUSE-SU-2025:0564-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-40980: dropmonitor: replace spinlock by rawspinlock bsc1227937. - CVE-2024-46858: mptcp: pm: Fix uaf in timerdeletesync bsc1231088. -...

Microsoft Security Update Validation Report February 2025

Microsoft’s February 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

SUSE: Security Advisory (SUSE-SU-2023:1848-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:1800-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : microcode_ctl (2025-c99f9d789a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c99f9d789a advisory. - Update to upstream 2.1-48. 20250211 - Addition of 06-bf-06/0x07 microcode in intel-ucode/06-97-02 at revision 0x38; - Addition of 06-bf-07/0x07...

CGA-Q2CP-8FW5-4MG2

Bulletin has no description...

Updated ffmpeg packages fix security vulnerabilities

A buffer overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ffbwdiffilterintrac function in the libavfilter/bwdifdsp.c:125:5 component. CVE-2023-49502 FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the...

CGA-MXW5-M488-459H

Bulletin has no description...

CVE-2025-26156

creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peim7o42a 2025-02-14 18:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7pi242p 2025-02-14 19:17:54+00:00|...

CVE-2025-23771

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzg3cez24 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750878299039...

Security Updates for Outlook C2R (February 2025)

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Security Updates for Microsoft Access Products C2R (February 2025)

The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21186, CVE-2025-21395, CVE-2025-21366 Note that Nessus has not tested for these issues but ha...

SUSE: Security Advisory (SUSE-SU-2025:0517-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RLSA-2025:0595 Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

CVE-2025-26519

creationtimestamp| type| source ---|---|--- 2025-02-13 17:44:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3li3ahbyuoi26 2025-02-13 17:54:51+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/113997859449174513 2025-02-13 17:55:12+00:00| seen|...

CGA-FPV8-W263-26V5

Bulletin has no description...

Vulnerability fixed in Veeam

Veeam has fixed a vulnerability in the Veeam Updater component. The vulnerability is in how the Veeam Updater component validates TLS certificates. Insufficient validation can allow Man-in-the-Middle attackers to execute arbitrary code on affected servers. This can lead to unauthorized access and...

Photon OS 4.0: Linux PHSA-2025-4.0-0754

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0754. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Updates for Microsoft Visual Studio Products (February 2025)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by a privilege elevation vulnerability. - An attacker could exploit the flaw to gain higher-level access privileges than they are normally allowed. Specifically, in this case, the weakness lies within th...