101 matches found
Amazon Linux 2023 : docker (ALAS2023-2025-934)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-934 advisory. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. CVE-2025-22868 SSH servers which implement file transfer protocols are vulnerable ...
Fedora 41 : mariadb10.11 (2025-66ce799182)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-66ce799182 advisory. MariaDB 10.11.11 Release notes: https://mariadb.com/kb/en/mariadb-10-11-11-release-notes/ Tenable has extracted the preceding description block...
CVE-2025-277477
creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...
FreeBSD : suricata -- Multiple vulnerabilities (1d53db32-0d60-11f0-8542-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1d53db32-0d60-11f0-8542-b42e991fc52e advisory. Suricate team reports: Multiple vulnerabilities These CVEs have been reserved and no details...
Amazon Linux 2 : freetype (ALAS-2025-2806)
The version of freetype installed on the remote host is prior to 2.8-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2806 advisory. FreeType 2.8.1 has a signed integer overflow in cf2doFlex in cff/cf2intrp.c. CVE-2025-23022 An out of bounds write exists ...
CGA-7GHR-F9CV-9R25
Bulletin has no description...
Amazon Linux AMI : kernel (ALAS-2025-1962)
The version of kernel installed on the remote host is prior to 4.14.353-190.569. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1962 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipcudpaddr2st...
GHSA-P34G-W82H-W82C vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-373G-HG3V-QF78 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3G85-44XP-3VMJ vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-63P9-G7FV-6CVR vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-9J3V-FX6C-G854 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-2XH8-RVM9-H559 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-RF3Q-QPH6-MX79 vulnerabilities
Vulnerabilities for packages: mysql...
Fedora 41 : kernel (2025-cca2fcc70c)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cca2fcc70c advisory. The 6.12.15 stable kernel update contains a number of important fixes across the tree. ---- The 6.12.14 stable kernel update contains a number of...
Oracle Linux 8 : nodejs:18 (ELSA-2025-1582)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1582 advisory. nodejs 1:18.20.6-1 - Update to version 18.20.6 Resolves: RHEL-78326 Fixes: CVE-2025-23085 CVE-2025-22150 nodejs-nodemon nodejs-packaging Tenable has...
RockyLinux 8 : kernel (RLSA-2025:1068)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:1068 advisory. kernel: scsi: core: Fix unremoved procfs host directory regression CVE-2024-26935 kernel: arm64/sve: Discard stale CPU state when handling SVE traps...
AlmaLinux 8 : kernel-rt (ALSA-2025:1067)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:1067 advisory. kernel: scsi: core: Fix unremoved procfs host directory regression CVE-2024-26935 kernel: arm64/sve: Discard stale CPU state when handling SVE traps...
Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2025-829)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-829 advisory. Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot...
Advisory ROSA-SA-2025-2654
software: unifdef 2.12 WASP: ROSA-CHROME packageevrstring: unifdef-2.12-1 CVE-ID: CVE-2023-28198 BDU-ID: 2023-04538 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the macOS operating system WebKit web page display module is associated with a post-release exploit error. Exploitation of the...