Fedora 41 : vaultwarden (2025-4cb7637c98)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4cb7637c98 advisory. fix VWVERSION in compiled code, patch security issues ---- update to 1.32.7 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : redis (ELSA-2025-0693)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0693 advisory. -- rebase to 6.2.17 for CVE-2024-46981 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

CVE-2025-0789

creationtimestamp| type| source ---|---|--- 2025-01-28 23:08:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113908496261938946 2025-01-28 23:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtljel6e52i 2025-01-29 01:09:58+00:00|...

Security Bulletin: IBM MQ Console is affected by a password disclosure vulnerability (CVE-2024-52897)

Summary IBM MQ has addressed a password disclosure vulnerability in the IBM MQ Console. Vulnerability Details CVEID:CVE-2024-52897 DESCRIPTION: IBM MQ web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. CWE:CWE-209:...

Security Bulletin: IBM MQ affected by denial of service vulnerability (CVE-2024-51470)

Summary IBM MQ has addressed a denial of service vulnerability Vulnerability Details CVEID:CVE-2024-51470 DESCRIPTION: IBM MQ could allow an authenticated user to cause a denial-of-service due to messages with improperly set values. CWE:CWE-754: Improper Check for Unusual or Exceptional Condition...

USN-7236-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; - VMware vSockets driver; CVE-2024-53164, CVE-2024-53103, CVE-2024-53141...

CVE-2024-40675

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Advisory ROSA-SA-2025-2662

software: openssh 9.5 OS: ROSA-CHROME packageevrstring: openssh-9.5 CVE-ID: CVE-2023-51385 BDU-ID: 2023-08955 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the SSH protocol implementation of the OpenSSH cryptographic security tool is related to the introduction or modification of an argument...

Apple users: Update your devices now to patch zero-day vulnerability

Apple has released a host of security updates across many devices, including for a zero-day bug which is being actively exploited in iOS. Apple said: "A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against...

CVE-2025-24480

creationtimestamp| type| source ---|---|--- 2025-01-28 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-03 2025-01-28 19:07:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113907548411724733 2025-01-28 19:15:43+00:00| seen|...

CVE-2024-23953

creationtimestamp| type| source ---|---|--- 2025-01-28 09:14:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113905214804040432 2025-01-28 09:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs4liekay2j 2025-01-28 12:56:14+00:00| seen|...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.14 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

CVE-2025-23094

creationtimestamp| type| source ---|---|--- 2025-01-28 03:57:11+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lgrkrtbk7k2f 2025-01-28 11:36:23+00:00| seen| https://t.me/CyberBulletin/2189 2025-01-28 13:30:09+00:00| seen| https://bsky.app/profile/bolhasec.com/post/3lgskskvvij2a...

Ubuntu: Security Advisory (USN-7230-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mariadb:10.11 security update

galera 26.4.20-1 - Rebase to 26.4.20 26.4.19-1 - Rebase to 26.4.19 26.4.18-1 - Rebase to 26.4.18 Judy mariadb 3:10.11.10-1 - Rebase to 10.11.10 3:10.11.9-1 - Rebase to 10.11.9...

CVE-2025-24151

creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxv7gyyk2p 2025-01-28 00:23:29+00:00| seen| https://t.me/cvedetector/16533 2025-01-28 00:59:41+00:00| seen|...

Important: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.3 security updates and bug fixes

Multicluster Engine for Kubernetes 2.7.3 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...

CVE-2025-0729

creationtimestamp| type| source ---|---|--- 2025-01-27 17:01:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113901391015002093 2025-01-27 17:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxxhgkp2e 2025-01-27 18:55:25+00:00| seen|...

SUSE-SU-2025:0264-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-4895...

BIT-NODE-MIN-2025-23087

Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...