CGA-QWPX-47C8-7X56

Bulletin has no description...

BELL-CVE-2025-37841

Bulletin has no description...

Fedora 41 : perl-Compress-Raw-Lzma / xz (2025-051becf4f2)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-051becf4f2 advisory. xz 5.8.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but...

CVE-2025-46821

Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the character from a set of valid characters in the URI path. As a result URI path containing the character will not match a URI template...

Google Chrome will use AI to block tech support scam websites

Google has expressed plans to use Artificial Intelligence AI to stop tech support scams in Chrome. With the launch of Chrome version 137, Google plans to use the on-device Gemini Nano large language model LLM to recognize and block tech support scams. Users already have the ability to chose...

CVE-2025-1278

An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2. Under certain conditions users could bypass IP access restrictions and view sensitive information...

CVE-2025-4382

creationtimestamp| type| source ---|---|--- 2025-05-09 12:26:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15714 2025-05-09 12:53:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqhnkjdgpg2 2025-05-09 13:28:11+00:00| seen|...

Vulnerabilities fixed in F5 BIG-IP

F5 has fixed vulnerabilities in its BIG-IP systems. The vulnerabilities are in several configurations of the BIG-IP systems, including the Traffic Management Microkernel TMM that can be terminated by unpublished requests. This can lead to performance and stability issues, especially for software...

UBUNTU-CVE-2025-37889

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platformmax as control value This reverts commit 9bdd10d57a88 "ASoC: ops: Shift tested values in sndsocputvolsw by +min", and makes some additional related updates. There are two ways the platformmax...

Remote Rowhammer Attack Using Adversarial Observations on Federated Learning Clients

Federated Learning FL has the potential for simultaneous global learning amongst a large number of parallel agents, enabling emerging AI such as LLMs to be trained across demographically diverse data. Central to this being efficient is the ability for FL to perform sparse gradient updates and...

CVE-2025-1329

creationtimestamp| type| source ---|---|--- 2025-05-08 22:25:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15639 2025-05-08 22:55:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114474677389527079 2025-05-08 23:14:39+00:00| seen|...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.50 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

CVE-2025-46712

Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 for OTP-27, OTP-26.2.5.12 for OTP-26, and OTP-25.3.2.21 for OTP-25, Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This...

CVE-2025-46712

CVE-2025-46712 describes an SSH handshake hardening bypass in Erlang/OTP: prior to OTP-27.3.4, OTP-26.2.5.12, and OTP-25.3.2.21, the SSH KEX handshake allows optional messages to be exchanged, enabling a MITM attacker to inject messages during the handshake. The issue has been patched in OTP-27.3...

MGASA-2025-0151 Updated thunderbird packages fix security vulnerabilities

Process isolation bypass using "javascript:" URI links in cross-origin frames. CVE-2025-4083 Unsafe attribute access during XPath parsing. CVE-2025-4087 Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. CVE-2025-4091 Memory safety bug fixed in...

CVE-2025-4207

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

RHSA-2025:4664 Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates

Bulletin has no description...

Ubuntu: Security Advisory (USN-7500-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-20368 · Rti · Rti Connext Professional

Name of the Vulnerable Software and Affected Versions: RTI Connext Professional versions 6.0.0 through 6.1.2.23 RTI Connext Professional versions 7.0.0 through 7.3.0.7 RTI Connext Professional versions 7.4.0 through 7.5.0 Description: The issue is an Out-of-bounds Read, Out-of-bounds Write...

PT-2025-20366 · Rti · Rti Connext Professional

Name of the Vulnerable Software and Affected Versions: RTI Connext Professional versions 4.4 through 6.1.2.23 RTI Connext Professional versions 7.0.0 through 7.3.0.7 RTI Connext Professional versions 7.4.0 through 7.5.0 Description: The issue is a heap-based buffer overflow vulnerability in RTI...