PT-2025-47906

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Network File System daemon nfsd in the Linux kernel contains a flaw related to reference counting in the nfsd set fh dentry function. Specifically, when an NFSv3 or NFSv2 client uses...

Linux Distros Unpatched Vulnerability : CVE-2025-65495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer signedness error in tlsverifycallback in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS...

[SECURITY] Fedora 43 Update: gnutls-3.8.11-1.fc43

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

CVE-2025-66098

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Camille V Travelers' Map travelers-map allows Stored XSS.This issue affects Travelers' Map: from n/a through = 2.3.2...

Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] Fedora 43 Update: dotnet10.0-10.0.100-1.fc43

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 43 Update: gopass-1.16.0-1.fc43

The slightly more awesome standard unix password manager for teams...

[SECURITY] Fedora 43 Update: cri-o1.34-1.34.2-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

Fedora 43 : dotnet10.0 (2025-41518fc0fd)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-41518fc0fd advisory. This is the .NET 10 GA update ---- Update .NET 10 to RC 2 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 43 : cri-o1.33 (2025-b339c2eaad)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b339c2eaad advisory. - Update to release 1.33.6 - Resolves: rhbz2407594, rhbz2407865, rhbz2408141, rhbz2408575 - Resolves: rhbz2408639, rhbz2408702, rhbz2409049,...

Fedora 43 : dovecot (2025-e491c93405)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e491c93405 advisory. fixes CVE-2025-30189 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...

blender-4.5-4.5.4-1.1 on GA media (moderate)

blender-4.5-4.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15755-1 Rating: moderate Cross-References: CVE-2022-0544 CVE-2022-0545 CVE-2022-0546 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues...

CVE-2025-11932 Timing Side-Channel in PSK Binder Verification

The server previously verified the TLS 1.3 PSK binder using a non-constant time method which could potentially leak information about the PSK binder...

CVE-2025-11935 Forward Secrecy Violation in WolfSSL TLS 1.3

With TLS 1.3 pre-shared key PSK a malicious or faulty server could ignore the request for PFS perfect forward secrecy and the client would continue on with the connection using PSK without PFS. This happened when a server responded to a ClientHello containing pskdheke without a keyshare...

qt5-qt3d security update

An update is available for qt5-qt3d. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt 3D provides functionality for near-realtime simulation systems with suppo...

JLSEC-2025-202 A Lucky 13 timing side channel in `mbedtls_ssl_decrypt_buf` in `library/ssl_msg.c` in Trusted...

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

CVE-2025-66060

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.13.0...

CVE-2025-66099 WordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeAtelier Chat Help chat-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chat Help: from n/a through = 3.1.3...

CVE-2025-66086 WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through = 3.8.8...

EUVD-2025-198459

Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through = 2.3.1...