PT-2025-11128 · Ruby-Saml +3 · Ruby-Saml +3

Name of the Vulnerable Software and Affected Versions: ruby-saml versions prior to 1.12.4 and 1.18.0 Description: The issue is related to the ruby-saml library, which provides security assertion markup language SAML single sign-on SSO for Ruby. The library is susceptible to remote Denial of Servi...

HPESBHF04810 rev.1 - HPE ProLiant DX Servers Using OpenSSL, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to v3.2005-27-2024 HPE ProLiant DX190r Gen10 server - Prior to v3.2005-27-2024 HPE ProLiant DX360 Gen10...

PT-2025-11002 · WordPress · Pagelayer

Name of the Vulnerable Software and Affected Versions: The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress versions up to, and including, 1.9.8 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private...

Joomla! RCE Vulnerability (20250301)

Joomla! is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

CVE-2025-26701

An issue was discovered in Percona PMM Server OVA before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure. This is fixed in PMM2 2.42.0-1.ova, 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, and 2.44.0-1.ova and in PMM3...

AMD Graphics Driver for Linux Disclosure - Lenovo Support US

No description provided...

PT-2025-10766 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSIEM versions 5.1.0 through 5.1.3 Fortinet FortiSIEM versions 5.2.1 through 5.2.2 Fortinet FortiSIEM versions 5.2.5 through 5.2.8 Fortinet FortiSIEM versions 5.3.0 through 5.3.3 Fortinet FortiSIEM version 5.4.0 Fortinet FortiSIE...

PT-2025-10865 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Substance3D - Sampler versions 4.5.2 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction,...

PT-2025-10866 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Substance3D - Sampler versions 4.5.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

KLA90917 PE vulnerability in Microsoft Visual Studio Code

An elevation of privilege vulnerability was found in Microsoft Visual Studio Code. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-26631 Exploitation Related products Microsoft-Visual-Studio Visual-Studio-Code Microsoft-Visual-Studio-Code CVE list...

Oracle Linux 8 : rsync (ELSA-2025-2600)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2600 advisory. 3.1.3-21 - Resolves: RHEL-70207 - Path traversal vulnerability in rsync Tenable has extracted the preceding description block directly from the Oracle...

KLA81544 Multiple vulnerabilities in Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability can be exploited to cause denial of service or execute...

PT-2025-10699 · WordPress · Qubely

Name of the Vulnerable Software and Affected Versions: Qubely – Advanced Gutenberg Blocks plugin for WordPress versions up to and including 1.8.13 Description: The issue allows authenticated attackers with Contributor-level access or higher to extract sensitive data from private, pending,...

Fedora: Security Advisory (FEDORA-2025-dcf429359c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7325-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QNAP QuTS hero Information Disclosure Vulnerability (QSA-25-03)

QNAP QuTS hero is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero...

QNAP QuTS hero Out-of-bounds Write Vulnerability (QSA-24-52)

QNAP QuTS hero is prone to an out-of-bounds write vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero";...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53165)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53165 advisory. - In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in...

Photon OS 4.0: Wireshark PHSA-2025-4.0-0762

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-10613

Name of the Vulnerable Software and Affected Versions autogpt-platform versions prior to autogpt-platform-beta-v0.4.2 Description The issue is related to a server-side request forgery SSRF vulnerability inside the Send Web Request component. The root cause is that IPV6 addresses are not restricte...