KB5055667: Servicing stack update for Windows Server 2012: April 8, 2025

None None...

Security Updates for Microsoft SharePoint Server 2019 (April 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-26642, CVE-2025-27747, CVE-2025-29793, CVE-2025-29794 %NASLMINLEVEL 7030...

Siemens Industrial Edge Devices

SUMMARY Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to...

PT-2025-15570 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft Office Word, which can be exploited by an...

PT-2025-15512 · Microsoft · Windows Rdp Client +1

Name of the Vulnerable Software and Affected Versions: Windows LDAP versions prior to the fixed version Description: The issue is related to a use after free vulnerability in the Windows LDAP protocol, allowing an unauthorized attacker to execute code over a network. This vulnerability enables...

PT-2025-15592

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specifi...

KLA82407 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure Local Cluster...

KLA82405 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in ASP.NET Core and Visual Studi...

Critical Photon OS Security Update - PHSA-2025-4.0-0777

Updates of 'apache-tomcat9' packages of Photon OS have been released...

Security Updates for Microsoft Word Products (April 2025)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

KB5055665: Servicing stack update for Windows Server 2012 R2: April 8, 2025

None None...

Security Updates for Microsoft SharePoint Server Subscription Edition (April 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-29793, CVE-2025-29794 %NASLMINLEVEL 70300 C Tenable, Inc...

Photon OS 5.0: Iperf PHSA-2025-5.0-0498

An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0498. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Updates for Microsoft Office Online Server (April 2025)

The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

openSUSE Security Advisory (SUSE-SU-2025:1127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 5.0: Linux PHSA-2025-5.0-0493

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0493. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Apr 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Linux 8 : libxslt (ELSA-2025-3615)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3615 advisory. - Fix CVE-2024-55549 RHEL-83506 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media Announcement ID: openSUSE-SU-2025:14970-1 Rating: moderate Cross-References: CVE-2025-0312 CVE-2025-23391 CVE-2025-29072 CVE-2025-29868 CVE-2025-30223 CVE-2025-31135 CVSS scores: CVE-2025-23391 SUSE : 9.1...

RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.62 (RHSA-2025:3452)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3452 advisory. Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP...