CVE-2025-47793

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. In Nextcloud Server prior to 30.0.2, 29.0.9, and 28.0.1, Nextcloud Enterprise Server prior to 30.0.2 and 29.0.9, and Nextcloud...

USN-7516-1 linux, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

Oracle Linux 8 : kernel (ELSA-2025-7531)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7531 advisory. - netfilter: ipset: add missing range check in bitmapipuadt Florian Westphal RHEL-70268 CVE-2024-53141 Tenable has extracted the preceding description...

Security Updates for Microsoft Excel Products C2R (May 2025)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-29977, CVE-2025-29979,...

Photon OS 5.0: Redis PHSA-2025-5.0-0522

An update of the redis package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0522. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

KLA83714 PE vulnerability in Microsoft System Center

An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-47161 Related products Microsoft-Defender-for-Endpoint-for-Linux CVE list CVE-2025-47161 critical Solution Install necessar...

Security Updates for Microsoft Visual Studio 2022/2019 Products (May 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an unauthorized attacker to execute code locally...

Photon OS 5.0: Libsoup PHSA-2025-5.0-0522

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0522. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 41 : dnsdist (2025-1d6a5aa3d8)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1d6a5aa3d8 advisory. Update to 1.9.9 to fix CVE-2025-30194 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Security Update for Microsoft Visual 2017 15.9 (May 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a information disclosure vulnerability where Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. CVE-2025-32703 Note that Ness...

Important: Red Hat Security Advisory: JBoss EAP XP 5.0 Update 2.0 release. See references for release notes.

JBoss EAP XP 5.0 Update 2.0 release. See references for release notes. JBoss EAP XP 5.0 Update 2.0 GA release. See references for release notes. Security Fixes: org.jboss.narayana-narayana-all: deadlock via multiple join requests sent to LRA Coordinator CVE-2024-8447...

CGA-PJJX-246H-5XF6

Bulletin has no description...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in various products such as Apogee, BacNet ATEC, Desigo CC, Intralog, OZW, Polarion, RUGGEDCOM, SICAM, SIMATIC, SIPROTEC, SIRIUS, Teamcenter and Versicharge The vulnerabilities potentially enable a malicious person to launch attacks that could result in the...

Wednesday, May 14, 2025 Security Releases

Wednesday, May 14, 2025 Security Releases Security releases available Updates are now available for the 24.x, 23.x, 22.x, 20.x Node.js release lines for the following issues. Improper error handling in async cryptographic operations crashes process CVE-2025-23166 - high The C++ method...

Alibaba Cloud Linux 3 : 0148: git (ALINUX3-SA-2024:0148)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0148 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-32002: Git is a revision control...

Alibaba Cloud Linux 3 : 0114: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0114)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0114 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-3108: An issue was discovered in...

Alibaba Cloud Linux 3 : 0128: mariadb:10.5 (ALINUX3-SA-2023:0128)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0128 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-32081: MariaDB v10.4 to v10.7 was...

Alibaba Cloud Linux 3 : 0220: mysql:8.0 (ALINUX3-SA-2022:0220)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0220 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-14672: Vulnerability in the MySQL...

Alibaba Cloud Linux 3 : 0104: pki-deps:10.6 (ALINUX3-SA-2022:0104)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0104 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-12384: FasterXML jackson-databind...

Alibaba Cloud Linux 3 : 0029: webkit2gtk3 (ALINUX3-SA-2023:0029)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0029 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-23529: RESERVED This candidate has been...