openSUSE Security Advisory (SUSE-SU-2025:0955-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1299)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : initramfs: avoid filename buffer overrunCVE-2024-53142 bpf, sockmap: Several fixes to bpfmsgpopdataCVE-2024-56720 scsi: sg: Fix slab-use-after-fre...

Fedora 41 : radare2 (2025-7b9adcd6ea)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7b9adcd6ea advisory. fix CVE-2024-56737, CVE-2025-56737, CVE-2025-1864 ---- Fix CVE-2025-1744 and CVE-2025-1864 Tenable has extracted the preceding description block...

SUSE-SU-2025:0945-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49080: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace bsc1238033. - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks...

RockyLinux 9 : Security and bug fixes for NetworkManager (Moderate) (RLSA-2025:0377)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0377 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its...

Fedora 40 : python-django4.2 (2025-d58f8ec8ec)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d58f8ec8ec advisory. ix for CVE-2025-26699: Potential denial-of-service vulnerability in django.utils.text.wrap Tenable has extracted the preceding description block directly fro...

CERTFR-2025-ACT-011

creationtimestamp| type| source ---|---|--- 2025-03-17 14:17:36+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114178198997319032 2025-03-17 14:17:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lkldtl2fgz2u 2025-03-17 14:51:15+00:00| seen|...

Microsoft Edge (Chromium-Based) < 134.0.3124.68 Unknown Vulnerability (Mar 2025)

Microsoft Edge Chromium-Based is prone to an unknown vulnerability SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 41 : vim (2025-7b21a14892)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7b21a14892 advisory. patchlevel 1202 Security fix for CVE-2025-29768 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

SUSE CVE-2025-1767

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remai...

Photon OS 5.0: Linux PHSA-2025-5.0-0486

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0486. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Moderate) (RHSA-2025:2518)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:2518 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

Fedora 40 : xen (2025-20bd6d94b9)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-20bd6d94b9 advisory. deadlock potential with VT-d and legacy PCI device pass-through XSA-467, CVE-2025-1713 Tenable has extracted the preceding description block directly from th...

CVE-2024-13771

creationtimestamp| type| source ---|---|--- 2025-03-14 12:40:10+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdmymtmnl2g 2025-03-14 13:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114161097294048919 2025-03-14 13:55:59+00:00| seen|...

Security Updates for Microsoft Office Products C2R (March 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-24057, CVE-2025-24080,...

Security Updates for Microsoft Visual Studio 2017 15.9 Products (March 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a vulnerability: - An undisclosed Visual Studio Elevation of Privilege Vulnerability CVE-2025-24998 Note that Nessus has not tested for these issues but has instead relied only on the application's...

Security Updates for Microsoft Word Products C2R (March 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-24078, CVE-2025-24079 Note that...

Security Updates for Microsoft Visual Studio 2022 17.8 / 17.10 / 17.12 / 17.13 Products (March 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed ASP.NET Core and xVisual Studio Elevation of Privilege Vulnerability CVE-2025-24070 - An undisclosed Visual Studio Elevation of Privilege...

Ubuntu: Security Advisory (USN-7332-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Updates for Microsoft Excel Products C2R (March 2025)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-24075, CVE-2025-24081,...