Oracle Linux 9 : libpq (ELSA-2025-1738)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1738 advisory. 13.20-1 - Update to 13.20 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

Medium: ansible-core

Issue Overview: This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks. CVE-2024-11079...

Azure Linux 3.0 Security Update: lua / memcached / ntopng (CVE-2021-44647)

The version of lua / memcached / ntopng installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44647 advisory. - Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function i...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2025:0552-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0552-1 advisory. - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705 Tenable has extracted the preceding...

SUSE SLES12 Security Update : emacs (SUSE-SU-2025:0574-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0574-1 advisory. - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. bsc1237091 Tenable has extracted the preceding...

SUSE SLES15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2025:0562-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0562-1 advisory. - CVE-2025-0395: Fix underallocation of abortmsgs struct bsc1236282 Tenable has extracted the preceding description block directly from the...

SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2025:0583-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0583-1 advisory. - CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet bsc1236353. Tenable has extracted the...

CVE-2025-0425

Cordaware bestinformed Infoclient is vulnerable to local privilege escalation: a low-privileged user can change the server address to a malicious or spoofed server, enabling elevation to nt authority\system on Windows. This relies on default GUI permissions and can be mitigated by deploying a cus...

Oracle Linux 9 : gcc-toolset-14-gcc (ELSA-2025-1300)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1300 advisory. 14.2.1-1.3 - disable jQuery use, don't ship jquery.js CVE-2020-11023, RHEL-78383 Tenable has extracted the preceding description block directly from the Oracle...

Azure Linux 3.0 Security Update: avahi (CVE-2023-38470)

The version of avahi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38470 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the avahiescapelabel function...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47755)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47755 advisory. - NIST NVD Details CVE-2024-47755 Note that Nessus has not tested for this issue but has instead relied only o...

Azure Linux 3.0 Security Update: nvidia-container-toolkit (CVE-2024-0132-M)

The version of nvidia-container-toolkit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0132-M advisory. - NIST NVD Details CVE-2024-0132 Note that Nessus has not tested for this issue but has...

Azure Linux 3.0 Security Update: gdb (CVE-2023-39130)

The version of gdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39130 advisory. - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at...

openSUSE 15 Security Update : python39 (SUSE-SU-2025:0386-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0386-1 advisory. - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705 Tenable has extracted the preceding...

Azure Linux 3.0 Security Update: emacs (CVE-2024-30202)

The version of emacs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-30202 advisory. - In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32618)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32618 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tgetnativetype in H5Tnative.c, resultin...

Azure Linux 3.0 Security Update: avahi (CVE-2023-1981)

The version of avahi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-1981 advisory. - A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call,...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-33874)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-33874 advisory. - HDF5 Library through 1.14.3 has a heap buffer overflow in H5Omtimenewencode in H5Omtime.c. CVE-2024-33874 Note...

EulerOS 2.0 SP12 : iptraf-ng (EulerOS-SA-2025-1191)

According to the versions of the iptraf-ng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : VUL-0: CVE-2024-52949: iptraf-ng: limit interface name lengths to IFNAMSIZCVE-2024-52949 Tenable has extracted the preceding description block...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32622)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32622 advisory. - HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from...