Oracle Linux 8 : webkit2gtk3 (ELSA-2025-0145)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0145 advisory. 2.46.5-1 - Update to 2.46.5 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Mozilla Firefox SEoL (109.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

Microsoft Windows 10 1507 Enterprise 2015 LTSB SEoL

Microsoft Windows 10 1507 Enterprise 2015 LTSB is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2025-060 (ALASKERNEL-5.15-2025-060)

The version of kernel installed on the remote host is prior to 5.15.173-118.169. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-060 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs...

CGA-WV9C-Q6J7-75MV

Bulletin has no description...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.6.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

Photon OS 3.0: Squid PHSA-2024-3.0-0809

An update of the squid package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0809. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Linux PHSA-2025-4.0-0732

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0732. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 40 : gimp (2024-ccdbd92d7b)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ccdbd92d7b advisory. This update fixes issues with loading TGA and XCF files. Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

CVE-2024-51919

creationtimestamp| type| source ---|---|--- 2025-01-08 22:05:42+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lfb6bzipbj2x 2025-01-11 21:32:55+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/113811860488076561 2025-01-16 00:41:32+00:00| seen|...

CGA-P772-F7G3-9MF8

Bulletin has no description...

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

The U.S. government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things IoT consumer devices. "IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission FCC said. "Under thi...

CVE-2024-12585

creationtimestamp| type| source ---|---|--- 2025-01-08 06:09:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113791241188437876 2025-01-08 06:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7j7d6sa62k 2025-01-08 06:38:06+00:00| seen|...

CVE-2025-21603

creationtimestamp| type| source ---|---|--- 2025-01-08 03:37:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/614 2025-01-08 03:47:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113790686183065901 2025-01-08 04:16:20+00:00| seen|...

Fedora 41 : mupdf (2025-7d002ee0e7)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7d002ee0e7 advisory. fix CVE-2024-46657 rhbz2331627 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CGA-63FC-J3H2-GHC8

Bulletin has no description...

CVE-2024-56270

creationtimestamp| type| source ---|---|--- 2025-01-07 16:55:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113788120883227727 2025-01-07 17:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65ncslk72f 2025-01-07 17:48:51+00:00| seen|...

CVE-2024-55555

creationtimestamp| type| source ---|---|--- 2025-01-07 16:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113788073120387147 2025-01-07 17:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65na7d5v2m 2025-01-07 17:48:50+00:00| seen|...

CVE-2025-0245

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixed in Firefox 134...

CVE-2025-0237

The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird...