Photon OS 4.0: Linux PHSA-2025-4.0-0732

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0732. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Squid PHSA-2024-3.0-0809

An update of the squid package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0809. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-51919

creationtimestamp| type| source ---|---|--- 2025-01-08 22:05:42+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lfb6bzipbj2x 2025-01-11 21:32:55+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/113811860488076561 2025-01-16 00:41:32+00:00| seen|...

CGA-P772-F7G3-9MF8

Bulletin has no description...

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

The U.S. government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things IoT consumer devices. "IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission FCC said. "Under thi...

CVE-2024-12585

creationtimestamp| type| source ---|---|--- 2025-01-08 06:09:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113791241188437876 2025-01-08 06:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7j7d6sa62k 2025-01-08 06:38:06+00:00| seen|...

CVE-2025-21603

creationtimestamp| type| source ---|---|--- 2025-01-08 03:37:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/614 2025-01-08 03:47:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113790686183065901 2025-01-08 04:16:20+00:00| seen|...

Fedora 41 : mupdf (2025-7d002ee0e7)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7d002ee0e7 advisory. fix CVE-2024-46657 rhbz2331627 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CGA-63FC-J3H2-GHC8

Bulletin has no description...

CVE-2024-56270

creationtimestamp| type| source ---|---|--- 2025-01-07 16:55:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113788120883227727 2025-01-07 17:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65ncslk72f 2025-01-07 17:48:51+00:00| seen|...

CVE-2024-55555

creationtimestamp| type| source ---|---|--- 2025-01-07 16:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113788073120387147 2025-01-07 17:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65na7d5v2m 2025-01-07 17:48:50+00:00| seen|...

CVE-2025-0245

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixed in Firefox 134...

CVE-2025-0237

The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird...

CVE-2024-12438

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/337 2025-01-07 06:03:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113785558196609609 2025-01-07 06:16:09+00:00| seen|...

CVE-2024-12633

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/335 2025-01-07 06:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrnqa6g2c 2025-01-07 06:18:53+00:00| seen|...

CVE-2024-12538

creationtimestamp| type| source ---|---|--- 2025-01-07 03:36:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/281 2025-01-07 03:58:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113785064291904237 2025-01-07 04:15:49+00:00| seen|...

CVE-2024-12540

creationtimestamp| type| source ---|---|--- 2025-01-07 03:35:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/280 2025-01-07 03:58:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113785064306284750 2025-01-07 04:15:52+00:00| seen|...

PT-2025-1324

Name of the Vulnerable Software and Affected Versions Linksys E1000 versions prior to 2.1.03 Linksys E1200 versions prior to 2.0.05 Linksys E3200 versions prior to 1.0.05 Description OS command injection is possible via shell metacharacters in the ping ip parameter of the 'apply.cgi' endpoint on...

Security Updates for Microsoft Office Products C2R (November 2024)

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2024-49031, CVE-2024-49032 Note that Nessus has not tested for this issue but has instead relied...

Security Updates for Microsoft Word Products C2R (November 2024)

The Microsoft Word Products are missing a security update. It is, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...