13661 matches found
Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console (CVE-2023-39325, CVE-2022-21698)
Summary github.com/prometheus/clientgolang, golang.org/x/net are dependency packages used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID:CVE-2023-39325 DESCRIPTION: A malicious HTTP/2 client which rapid...
CVE-2025-38141
In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...
Oracle Linux 10 : python3.12 (ELSA-2025-10140)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10140 advisory. - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Tenable has extracted the preceding description block...
Fedora 42 : giflib (2025-928071dafb)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-928071dafb advisory. Backport proposed fix for CVE-2025-31344 from OpenMandriva. ---- Install gifgetarg.h header. Tenable has extracted the preceding description block...
Fedora 42 : iputils (2025-dd7e746aac)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-dd7e746aac advisory. Fix for CVE-2025-47268 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
PT-2025-27801 · Asna · Asna Registrar +16
Name of the Vulnerable Software and Affected Versions: ASNA Assist versions prior to 2025-03-31 ASNA Registrar versions prior to 2025-03-31 DataGate for SQL Server versions 17.0.36.0 and 16.0.89.0 DataGate Component Suite versions 17.0.36.0 and 16.0.89.0 DataGate Monitor versions 17.0.26.0 and...
Fedora 42 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-26c0346398)
The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-26c0346398 advisory. Fix CVE-2024-56406 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Photon OS 5.0: Spdlog PHSA-2025-5.0-0547
An update of the spdlog package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0547. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
MGASA-2025-0200 Updated libarchive packages fix security vulnerabilities
Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c. CVE-2025-5914 Heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c. CVE-2025-5915 Integer overflow while reading warc files at archivereadsupportformatwarc.c. CVE-2025-5916 Off by one error in...
CGA-VP5Q-G93R-42XP
Bulletin has no description...
Oracle Linux 9 : python3.12 (ELSA-2025-10189)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10189 advisory. - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Tenable has extracted the preceding description block...
Photon OS 4.0: Gobgp PHSA-2025-4.0-0807
An update of the gobgp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0807. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Linux PHSA-2025-5.0-0545
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0545. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Krb5 PHSA-2025-5.0-0545
An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0545. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CGA-7PFG-6W4G-4739
Bulletin has no description...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.19.2 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Fedora 42 : apache-commons-beanutils (2025-48e8e5f8ed)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-48e8e5f8ed advisory. Fix improper access control vulnerability Resolves: CVE-2025-48734 Tenable has extracted the preceding description block directly from the Fedora security...
Ubuntu: Security Advisory (USN-7595-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-52898 Frappe account takeover via password reset token leakage
Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, a carefully crafted request could lead to a malicious actor getting access to a user's password reset token. This can only be exploited on self hosted instances configured in a certain way. Frappe Cloud users...