KLA79349 PE vulnerability in TeamViewer

Elevation of privilege vulnerability was found in TeamViewer. Malicious users can exploit this vulnerability to gain privileges. Original advisories Improper Neutralization of Argument Delimiters in TeamViewer Clients Related products TeamViewer TeamViewer-Host CVE list CVE-2025-0065 unknown...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 48 for SLE 15 SP3) (SUSE-SU-2025:0246-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-1924

Name of the Vulnerable Software and Affected Versions Satera MF656Cdw/Satera MF654Cdw versions v05.04 and earlier Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw versions v05.04 and earli...

KLA79348 ACE vulnerability in Google Chrome

Use after free vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2025-0762 unknown Solution Update to the...

EXIF Viewer Classic vulnerable to cross-site scripting

Overview EXIF Viewer Classic provided by Rodrigue former Kakera is a Google Chrome browser extension. The affected versions of the product improperly handle EXIF meta data, resulting in a cross-site scripting vulnerability CWE-79. Versions 2.3.2 and 2.4.0 were reported as vulnerable. The vendor...

TightVNC Privilege Escalation Vulnerability (Jan 2025) - Windows

TightVNC is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tightvnc:tightvnc";...

PT-2025-5456 · Bestwebsoft · Bestwebsoft Google Captcha

Name of the Vulnerable Software and Affected Versions: BestWebSoft Google Captcha versions 1.78 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability that allows Identity Spoofing. This vulnerability affects the Google Captcha plugin, enabling potenti...

PT-2025-1993

Name of the Vulnerable Software and Affected Versions WP Triggers Lite WordPress plugin versions 2.5.3 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the...

PT-2025-5554 · Unknown · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps versions prior to 9.0.41 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in WP Go Maps, formerly known as WP Google Maps. This vulnerability allows an attacker to trick a user into performing unintended...

VLC Media Player Multiple Vulnerabilities (Jan 2025) - Linux

VLC Media Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:videolan:vlcmediaplayer";...

Debian: Security Advisory (DSA-5850-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VLC Media Player Multiple Vulnerabilities (Jan 2025) - Windows

VLC Media Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:videolan:vlcmediaplayer";...

TightVNC Privilege Escalation Vulnerability (Jan 2025) - Linux

TightVNC is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tightvnc:tightvnc";...

Fedora 41 : chromium (2025-eb2f4a2306)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-eb2f4a2306 advisory. Update to 132.0.6834.110 High CVE-2025-0611: Object corruption in V8 High CVE-2025-0612: Out of bounds memory access in V8 Tenable has extracted the...

AlmaLinux 9 : git-lfs (ALSA-2025:0673)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:0673 advisory. git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs CVE-2024-53263 Tenable has extracted the preceding description block directly from the...

PT-2025-5557 · Unknown · Popup Maker

Name of the Vulnerable Software and Affected Versions: Popup Maker versions through 1.20.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious scripts...

PT-2025-5536 · Unknown · Faq Builder Ays

Name of the Vulnerable Software and Affected Versions: FAQ Builder AYS versions 1.7.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious scripts into th...

Mageia: Security Advisory (MGASA-2025-0021)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7227-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-4980 · Unknown · Cbx Accounting & Bookkeeping

Name of the Vulnerable Software and Affected Versions: CBX Accounting & Bookkeeping versions 1.3.14 and earlier Description: The issue affects CBX Accounting & Bookkeeping, allowing Reflected XSS due to improper neutralization of input during web page generation. This enables attackers to inject...