CVE-2025-38239

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix invalid node index On a system with DRAM interleave enabled, out-of-bound access is detected: megaraidsas 0000:3f:00.0: requested/available msix 128/128 pollqueue 0 ------------ cut here ------------ UBSAN:...

GLSA-202507-09 : Git: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202507-09 Git: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

APSB25-69 : Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolve critical, important and moderate vulnerabilities that could lead to arbitrary file system read, arbitrary code execution, privilege escalation, security feature bypass and application...

tomcat11-11.0.8-1.1 on GA media (moderate)

tomcat11-11.0.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15303-1 Rating: moderate Cross-References: CVE-2025-46701 CVE-2025-48988 CVE-2025-49125 CVSS scores: CVE-2025-46701 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2025-46701 SUSE : 6.3...

CVE-2025-6926

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

Fedora 41 : chromium (2025-4fed640c91)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4fed640c91 advisory. Update to 137.0.7151.119 CVE-2025-6191: Integer overflow in V8 CVE-2025-6192: Use after free in Profiler Tenable has extracted the preceding...

Fedora 41 : chromium (2025-e4b1668bdd)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e4b1668bdd advisory. Update to 138.0.7204.49 CVE-2025-6555: Use after free in Animation CVE-2025-6556: Insufficient policy enforcement in Loader CVE-2025-6557:...

[SECURITY] [DLA 4227-1] dcmtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4227-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès June 24, 2025 https://wiki.debian.org/LTS -...

Fedora 42 : xorg-x11-server-Xwayland (2025-b4d521f084)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b4d521f084 advisory. Update to xserver 24.1.8, contains an additional fix for CVE-2025-49176 ---- Update to xserver 24.1.7, CVE fix for CVE-2025-49175, CVE-2025-49176,...

CVE-2022-50001

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfttproxy: restrict to prerouting hook TPROXY is only allowed from prerouting, but nfttproxy doesn't check this. This fixes a crash null dereference when using tproxy from e.g. output...

CVE-2022-50102

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: arkfb: Fix a divide-by-zero bug in arksetpixclock Since the user can control the arguments of the ioctl from the user space, under special arguments that may result in a divide-by-zero bug in:...

Fedora 41 : rust-git-interactive-rebase-tool (2025-26640e9e35)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-26640e9e35 advisory. Rebuild for CVE-2024-12224, CVE-2025-4574 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

TencentOS Server 3: git (TSSA-2022:0109)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0109 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Fedora 41 : wireshark (2025-8043d4cd71)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8043d4cd71 advisory. New version 4.4.7 ---- Ignoring potential error when using udevadm in %post scriptlet Tenable has extracted the preceding description block directly...

PT-2025-25274 · Info Zip +1 · Info-Zip +1

Name of the Vulnerable Software and Affected Versions: Archive::Unzip::Burst versions 0.01 through 0.09 Description: The issue concerns a bundled InfoZip library in Archive::Unzip::Burst for Perl, which is affected by several vulnerabilities. Recommendations: For Archive::Unzip::Burst versions 0....

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these issues with an update. Vulnerability Details CVEID:CVE-2024-40906 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always stop health timer during driver removal Currently, if teardownhca fails to...

Fedora 42 : chromium (2025-bc0d109630)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bc0d109630 advisory. Update to 137.0.7151.68 CVE-2025-5419: Out of bounds read and write in V8 CVE-2025-5068: Use after free in Blink Tenable has extracted the preceding...

Fedora 41 : nextcloud (2025-567c3cc842)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-567c3cc842 advisory. 31.0.5 release RHBZ2364462 RHBZ2366729 RHBZ2366735 Tenable has extracted the preceding description block directly from the Fedora security advisory...

ASB-A-409047090

Bulletin has no description...

Mozilla Firefox Security Update (mfsa_2025-42) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...