CGA-WV9C-Q6J7-75MV

Bulletin has no description...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.6.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

Photon OS 3.0: Squid PHSA-2024-3.0-0809

An update of the squid package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0809. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 40 : gimp (2024-ccdbd92d7b)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ccdbd92d7b advisory. This update fixes issues with loading TGA and XCF files. Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Photon OS 4.0: Linux PHSA-2025-4.0-0732

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0732. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-51919

creationtimestamp| type| source ---|---|--- 2025-01-08 22:05:42+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lfb6bzipbj2x 2025-01-11 21:32:55+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/113811860488076561 2025-01-16 00:41:32+00:00| seen|...

CGA-P772-F7G3-9MF8

Bulletin has no description...

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

The U.S. government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things IoT consumer devices. "IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission FCC said. "Under thi...

CVE-2024-12585

creationtimestamp| type| source ---|---|--- 2025-01-08 06:09:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113791241188437876 2025-01-08 06:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7j7d6sa62k 2025-01-08 06:38:06+00:00| seen|...

CVE-2025-21603

creationtimestamp| type| source ---|---|--- 2025-01-08 03:37:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/614 2025-01-08 03:47:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113790686183065901 2025-01-08 04:16:20+00:00| seen|...

Fedora 41 : mupdf (2025-7d002ee0e7)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7d002ee0e7 advisory. fix CVE-2024-46657 rhbz2331627 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CGA-63FC-J3H2-GHC8

Bulletin has no description...

CVE-2024-56270

creationtimestamp| type| source ---|---|--- 2025-01-07 16:55:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113788120883227727 2025-01-07 17:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65ncslk72f 2025-01-07 17:48:51+00:00| seen|...

CVE-2024-55555

creationtimestamp| type| source ---|---|--- 2025-01-07 16:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113788073120387147 2025-01-07 17:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65na7d5v2m 2025-01-07 17:48:50+00:00| seen|...

CVE-2025-0245

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixed in Firefox 134...

CVE-2025-0237

The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird...

CVE-2024-12438

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/337 2025-01-07 06:03:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113785558196609609 2025-01-07 06:16:09+00:00| seen|...

CVE-2024-12633

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/335 2025-01-07 06:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrnqa6g2c 2025-01-07 06:18:53+00:00| seen|...

CVE-2024-12538

creationtimestamp| type| source ---|---|--- 2025-01-07 03:36:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/281 2025-01-07 03:58:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113785064291904237 2025-01-07 04:15:49+00:00| seen|...

CVE-2024-12540

creationtimestamp| type| source ---|---|--- 2025-01-07 03:35:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/280 2025-01-07 03:58:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113785064306284750 2025-01-07 04:15:52+00:00| seen|...