AlmaLinux 9 : git-lfs (ALSA-2025:0673)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:0673 advisory. git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs CVE-2024-53263 Tenable has extracted the preceding description block directly from the...

PT-2025-5536 · Unknown · Faq Builder Ays

Name of the Vulnerable Software and Affected Versions: FAQ Builder AYS versions 1.7.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious scripts into th...

PT-2025-5557 · Unknown · Popup Maker

Name of the Vulnerable Software and Affected Versions: Popup Maker versions through 1.20.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious scripts...

Mageia: Security Advisory (MGASA-2025-0021)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7227-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-4980 · Unknown · Cbx Accounting & Bookkeeping

Name of the Vulnerable Software and Affected Versions: CBX Accounting & Bookkeeping versions 1.3.14 and earlier Description: The issue affects CBX Accounting & Bookkeeping, allowing Reflected XSS due to improper neutralization of input during web page generation. This enables attackers to inject...

PT-2025-5432 · WordPress · Woocommerce Product Table Lite

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Table Lite versions 3.8.7 and earlier Description: The issue is related to a lack of authorization in WooCommerce Product Table Lite, allowing the exploitation of incorrectly configured access control security levels...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2025-061 (ALASKERNEL-5.15-2025-061)

The version of kernel installed on the remote host is prior to 5.15.176-118.170. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-061 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential deadlock on...

Amazon Linux 2 : python-jinja2 (ALAS-2025-2734)

The version of python-jinja2 installed on the remote host is prior to 2.7.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2734 advisory. Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls t...

Ubuntu: Security Advisory (USN-7205-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-5250 · Woocommerce · Product Size Charts Plugin For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Size Charts Plugin for WooCommerce versions 2.4.5 and earlier Description: The issue is related to a Missing Authorization vulnerability. This means that there is a lack of proper authorization checks, potentially allowing unauthorize...

PT-2025-5561 · Godaddy · Godaddy Coblocks

Name of the Vulnerable Software and Affected Versions: GoDaddy CoBlocks versions through 3.1.13 Description: The issue is related to Missing Authorization in GoDaddy CoBlocks, which enables the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-5543

Name of the Vulnerable Software and Affected Versions ElementInvader Addons for Elementor versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-5515 · Kiboko · Kiboko Labs Chained Quiz

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Chained Quiz versions 1.3.2.9 and earlier Description: A Server-Side Request Forgery SSRF issue allows for server-side request forgery. This issue may potentially be exploited to access internal resources or conduct further attack...

Oracle Linux 8 : redis:6 (ELSA-2025-0595)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0595 advisory. - rebase to 6.2.17 for CVE-2024-46981 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Ubuntu: Security Advisory (USN-7226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache CXF < 3.5.10 , 3.6.x < 3.6.5, 4.0.x < 4.0.6 DoS

In versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6, a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consumption will continue to increase, eventually causing the application to run out of memory. Note that Nessus has not...

PT-2025-3157

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9 Description A mail spoofing issue allows attackers to forge email headers, making it appear as though messages are sent from trusted sources. Recommendations For versions prior to 5.6.701.9,...

PT-2025-3985

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 25.1 Description The issue allows a highly privileged user to recover external connector passwords due to unsafe password recovery from the configuration. Recommendations For versions prior to 25.1, update to...

Google Chrome Security Update (stable-channel-update-for-desktop_22-2025-01) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...