GHSA-79Q9-8FF3-X4G2 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-PJ6G-H9CH-R92C vulnerabilities

Vulnerabilities for packages: openjdk-17-openj9, corretto, openjdk-21-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-11-openj9...

TencentOS Server 3: httpd:2.4 (TSSA-2022:0017)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0017 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 4: grafana (TSSA-2024:0808)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0808 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: thunderbird (TSSA-2023:0307)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0307 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: jaeger, nats, fixuid, dapr-fips, pluto, thanos-operator-fips, aws-load-balancer-controller-fips, kubernetes-csi-external-attacher-fips, aws-application-networking-k8s, fq, kubernetes-dashboard-fips, vault-k8s, beats, cloud-sql-proxy, hubble-ui, flux-helm-controller,...

Fedora 42 : nbdkit (2025-8a2d82f65a)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8a2d82f65a advisory. New upstream stable branch version 1.42.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

GHSA-PPH8-GCV7-4QJ5 vulnerabilities

Vulnerabilities for packages: airflow, py3-xet-core...

Debian: Security Advisory (DSA-5929-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Alibaba Cloud Linux 3 : 0110: container-tools:rhel8 (ALINUX3-SA-2022:0110)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0110 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-5736: runc through 1.0-rc6, as us...

Alibaba Cloud Linux 3 : 0108: GNOME (ALINUX3-SA-2022:0108)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0108 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2018-20337: There is a stack-based...

Alibaba Cloud Linux 3 : 0011: libXpm (ALINUX3-SA-2023:0011)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0011 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-44617: RESERVED This candidate ha...

Fedora 41 : workrave (2025-d611c8d114)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d611c8d114 advisory. Unretireing the package. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

GHSA-CQH9-JFQR-H9JJ vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-2GH3-RMM4-6RQ5 vulnerabilities

Vulnerabilities for packages: ztunnel, yara-x, parseable, rust-analyzer, ztunnel-fips, qdrant...

Linux Distros Unpatched Vulnerability : CVE-2025-21760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ndisc: extend RCU protection in ndiscsendskb ndiscsendskb can be called without RTNL or RCU held. Acquire rcureadlock earlier, so that we can use devnetrcu and...

Linux Distros Unpatched Vulnerability : CVE-2020-36788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau: avoid a use-after-free when BO init fails nouveauboinit is backed by ttmboinit and ferries its return code back to the caller. On failures, ttmboin...

Linux Distros Unpatched Vulnerability : CVE-2017-11411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in...

GHSA-GHWG-GPP4-W4X3 vulnerabilities

Vulnerabilities for packages: grpc...

GHSA-Q98G-HXG3-268C vulnerabilities

Vulnerabilities for packages: python...