GHSA-QQPG-MVQG-649V vulnerabilities

Vulnerabilities for packages: ontop-fips, cassandra-fips, nacos-docker, cassandra, localstack, apache-nifi, keycloak-config-cli, zookeeper-fips, nacos, apache-nifi-registry, management-api-for-apache-cassandra-4.1, sonarqube, management-api-for-apache-cassandra-4.0,...

Security Bulletin: Enterprise Content Managemant System Monitor for December 2025 - multiple CVEs

Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...

Security Bulletin: Security vulnerabilities found in the Red Hat Universal Minimal Base Image shipped with CICS Transaction Gateway for Multiplatforms

Summary Security vulnerabilities found in the Red Hat Universal Base Image Minimal shipped with CICS Transaction Gateway for Multiplatforms. This fix resolves these vulnerability CVE-2024-28757, CVE-2025-59375, CVE-2025-5372. Vulnerability Details CVEID:CVE-2024-28757 DESCRIPTION: libexpat throug...

Dormakaba Access Manager security vulnerabilities

The Dormakaba Access Manager is a smart hardware controller developed by the Dormakaba company in the United States. There are security vulnerabilities in the Dormakaba Access Manager 92xx K7 version. These vulnerabilities stem from hard-coded weak passwords in the SSH service, which may allow...

Fedora 42 : mingw-openexr (2026-0e8fe3c8a3)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0e8fe3c8a3 advisory. Update to openexr-3.3.6, fixes multiple security issues. Tenable has extracted the preceding description block directly from the Fedora security...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 have security vulnerabilities. These vulnerabilities stem from the maintenance interface, which exposes sensitive credentials in plain text, potentially allowing network...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. The Tenda W30E V2 and earlier versions have security vulnerabilities. These vulnerabilities stem from the lack of appropriate cache control instructions, which may lead to the storage of credentials in the browser’s local storage...

Dormakaba Exos 9300 security vulnerabilities

Dormakaba Exos 9300 is an access control and security management system developed by the American company Dormakaba. Dormakaba Exos 9300 has security vulnerabilities; these vulnerabilities stem from multiple hardcoded keys contained in the program libraries and binary files, along with a weak...

Beetel 777VR1 security vulnerabilities

Beetel 777VR1 is a router produced by the Beetel company. Versions of Beetel 777VR1 prior to 01.00.09/01.00.0955 contain security vulnerabilities. These vulnerabilities stem from operations involving the UART interface component, which may lead to the requirement of weak passwords...

Fedora 42 : pgadmin4 (2026-e55e601165)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e55e601165 advisory. Update bundled devalue / svelte Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

MGASA-2026-0017 Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.120 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel...

SUSE SLES15 Security Update : kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:0246-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0246-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.91 fixes various security issues The following security issues were fixed: -...

iccDEV security vulnerability

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.1 contained security vulnerabilities. These vulnerabilities stemmed from undefined behavior in icSigCalcOp, which could lead to denial-of-service attacks,...

SUSE SLES15 Security Update : kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:0269-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0269-1 advisory. This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues The following security issues were fixed: -...

GHSA-5RFX-CP42-P624 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-273P-M2CW-6833 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, kyverno-policy-reporter-plugins-kyverno, crossplane, gh, cg, policy-controller-fips, image-factory, kyverno-fips, kubescape, trivy, spire-server-fips, cloudbeat, gitsign, aactl, ko, vexctl, skaffold-fips, falcoctl, buildkitd-fips, crossplane-fips,...

Security Bulletin: Multiple vulnerabilities in Java SE affect IBM® Db2® Big SQL on IBM Cloud Pak for Data.

Summary Multiple vulnerabilities in Java SE 8 affect IBM® Db2® Big SQL 7 on IBM Cloud Pak for Data 4 & 5 Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow a remote attacker to cause no confidentiality impact, ...

Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL on IBM Cloud Pak for Data

Summary Multiple vulnerabilities in IBM Db2 12.1 affect IBM® Db2® Big SQL 7 and 8 on IBM Cloud Pak for Data 5.2 and earlier. Vulnerability Details CVEID:CVE-2025-33012 DESCRIPTION: IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux...

Fedora 42 : rclone (2026-b4a6ca0bd0)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b4a6ca0bd0 advisory. Update to 1.72.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

DynamicWeb security vulnerabilities

DynamicWeb is a full-stack digital experience platform developed by the American company DynamicWeb. Versions of DynamicWeb prior to 9.12.8 contained security vulnerabilities. These vulnerabilities were caused by logical issues that allowed new administrator users to be added, potentially leading...