Fedora 41 : firefox (2025-60c0e24d76)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-60c0e24d76 advisory. - Updated to latest upstream 136.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Critical Photon OS Security Update - PHSA-2025-5.0-0485

Updates of 'rubygem-activesupport', 'gettext', 'libxml2' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2024-56773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunitdevicedrivertest kunitkzalloc may return a NUL...

electron33 -- multiple vulnerabilities

Electron develpers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2025-0445. Security: backported fix for CVE-2025-0995. Security: backported fix for CVE-2025-0998...

CLSA-2025-1741216500 Fix CVE(s): CVE-2024-31068, CVE-2024-36293, CVE-2024-39279

New microcode update packages from upstream up to 2025-02-11: - New microcodes: sig 0x000a06f3, pfmask 0x01, 2024-11-22, rev 0x3000330, size 1533952 sig 0x000b0674, pfmask 0x32, 2024-09-25, rev 0x012c, size 211968 sig 0x000b06f6, pfmask 0x07, 2024-08-01, rev 0x0038, size 225280 sig 0x000b06f7,...

CVE-2023-38693

Lucee Server or simply Lucee is a dynamic, Java based, tag and scripting language used for rapid web application development. The Lucee REST endpoint is vulnerable to RCE via an XML XXE attack. This vulnerability is fixed in Lucee 5.4.3.2, 5.3.12.1, 5.3.7.59, 5.3.8.236, and 5.3.9.173...

Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability

A vulnerability in the interprocess communication IPC channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client. This...

RUSTSEC-2025-0010 Versions of *ring* prior to 0.17 are unmaintained.

ring 0.16.20 was released over 4 years ago and isn't maintained, tested, etc. Additionally, the project's general policy is to only patch the latest release, which is 0.17.12 now. It will be difficult for anybody to backport future fixes to versions earlier than 0.17.10 due to license changes...

CVE-2025-1916

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6483 2025-03-05 06:04:06+00:00| seen| https://t.me/cvedetector/19578 2025-03-05 06:44:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114108469900652674 2025-03-05...

CVE-2025-1917

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6482 2025-03-05 06:04:07+00:00| seen| https://t.me/cvedetector/19579 2025-03-05 07:19:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv4iuta22 2025-03-11...

CVE-2025-1919

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6480 2025-03-05 06:04:12+00:00| seen| https://t.me/cvedetector/19581 2025-03-05 07:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv6ih522e 2025-03-06...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.37 security update

Red Hat OpenShift Container Platform release 4.16.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Linux Distros Unpatched Vulnerability : CVE-2022-3094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to a lack of free memory...

Linux Distros Unpatched Vulnerability : CVE-2023-52667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fsanycreategroups When kcalloc for ft-g succeeds b...

Linux Distros Unpatched Vulnerability : CVE-2021-47318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: archtopology: Avoid use-after-free for scalefreqdata Currently topologyscalefreqtick which...

Linux Distros Unpatched Vulnerability : CVE-2024-46756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 2024-10-24: CVE-2024-46828 was added to this advisory. 2024-10-24: CVE-2024-46840 was added to this advisory. 2024-10-24: CVE-2024-46822 was added to this...

PT-2025-9821

Name of the Vulnerable Software and Affected Versions Kibana versions 8.15.0 through 8.17.2 Description Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions = 8.15.0 and 8.17.1, this is exploitable by...

Linux Distros Unpatched Vulnerability : CVE-2022-46165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync maliciou...

openSUSE Security Advisory (openSUSE-SU-2025:0081-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : fscrypt (2025-fc7c0ca5c5)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-fc7c0ca5c5 advisory. Update to 0.3.5 to fix FTBFS and test failures Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...