40628 matches found
CVE-2025-0868
creationtimestamp| type| source ---|---|--- 2025-02-20 14:49:35+00:00| seen| https://t.me/cvedetector/18542 2025-02-20 15:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limlaauq6h2y 2025-02-20 23:26:54+00:00| seen| Telegram/YcLyfgjxS8wFVsXueB-Fpx0MMnYTtaDaq1jL96EujmeZ3VmW...
CVE-2024-13520 Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates
The Gift Cards Gift Vouchers and Packages WooCommerce Supported plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the 'updatevoucherprice', 'updatevoucherdate', 'updatevouchernote' functions in all versions up to, and...
CVE-2025-0425
Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as the "bestinformed Infoclient" runs with elevated permissions "nt authority\system". By changing the...
Fedora 41 : libtasn1 (2025-9b659aa327)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9b659aa327 advisory. Includes CVE fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...
Fedora: Security Advisory (FEDORA-2025-dd577cf35f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 40 : microcode_ctl (2025-dd577cf35f)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-dd577cf35f advisory. - Update to upstream 2.1-48. 20250211 - Addition of 06-bf-06/0x07 microcode in intel-ucode/06-97-02 at revision 0x38; - Addition of 06-bf-07/0x07...
Fedora 41 : python3.11 (2025-81304012fc)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-81304012fc advisory. Security fix for CVE-2025-0938 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
PT-2025-7604
Name of the Vulnerable Software and Affected Versions Erlang OTP versions prior to 25.3.2.18 Erlang OTP versions prior to 26.2.5.9 Erlang OTP versions prior to 27.2.4 Description The issue arises from improper verification of packet size for SFTP packets. When multiple SSH packets are received,...
Photon OS 3.0: Openssh PHSA-2025-3.0-0817
An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-3.0-0817. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
WordPress Gift Cards plugin <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates vulnerability
Missing Authorization to Unauthenticated Price, Date, and Note Updates vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin Gift Vouchers versions = 4.4.9...
OPENSUSE-SU-2025:0067-1 Security update for java-17-openj9
This update for java-17-openj9 fixes the following issues: - Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine - Including Oracle October 2024 and January 2025 CPU changes CVE-2024-21208 boo1231702, CVE-2024-21210 boo1231711, CVE-2024-21217 boo1231716, CVE-2024-21235 boo1231719,...
CVE-2020-35546
creationtimestamp| type| source ---|---|--- 2025-02-19 22:05:49+00:00| seen| https://t.me/cvedetector/18478 2025-02-19 22:06:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwtngcu2a 2025-02-20 17:48:22+00:00| seen|...
Directus allows updates to non-allowed fields due to overlapping policies
Summary If there are two overlapping policies for the update action that allow access to different fields, instead of correctly checking access permissions against the item they apply for the user is allowed to update the superset of fields allowed by any of the policies. E.g. have one policy...
CVE-2025-27089 Overlapping policies allow update to non-allowed fields in directus
Directus is a real-time API and App dashboard for managing SQL database content. In affected versions if there are two overlapping policies for the update action that allow access to different fields, instead of correctly checking access permissions against the item they apply for the user is...
CVE-2025-27089 Overlapping policies allow update to non-allowed fields in directus
Directus is a real-time API and App dashboard for managing SQL database content. In affected versions if there are two overlapping policies for the update action that allow access to different fields, instead of correctly checking access permissions against the item they apply for the user is...
Cisco Video Phone 8875 and Desk Phone 9800 Series Information Disclosure Vulnerability
A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials with SSH access ...
Cisco BroadWorks Application Delivery Platform Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management interface do...
CVE-2024-13479
creationtimestamp| type| source ---|---|--- 2025-02-19 12:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqvr23qc2k 2025-02-19 14:16:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnjvfrl22 2025-02-19 16:14:11+00:00| seen|...
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250211 release bsc1237096 CVE-2024-31068: Improper Finite State Machines FSMs in Hardware Logic for some Intel Processors may allow privileged user to potentially enable denial of service via local...