Slackware Linux 15.0 / current libxslt Multiple Vulnerabilities (SSA:2025-072-01)

The version of libxslt installed on the remote host is prior to 1.1.43. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-072-01 advisory. New libxslt packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Fedora 40 : tigervnc (2025-a87bc329fe)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a87bc329fe advisory. Fixes for xorg-x11-server CVEs. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-11187 DESCRIPTION: It is possible to construct a zone such that some queries ...

CVE-2024-57874 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-57874 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-58084

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix missing read barrier in qcomscmgettzmempool Commit 2e4955167ec5 "firmware: qcom: scm: Fix scm and waitq completion variable initialization" introduced a write barrier in probe function to store global 'sc...

CVE-2022-49450

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix listen setting the bar too high for the prealloc rings AFRXRPC's listen handler lets you set the backlog up to 32 if you bump up the sysctl, but whilst the preallocation circular buffers have 32 slots in them, one of...

CVE-2022-49558

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook unregistration in netns path nftreleasehooks is called from prenetns exit path which unregisters the hooks, then the NETDEVUNREGISTER event is triggered which unregisters the hooks again. 565.2214...

openSUSE Security Advisory (SUSE-SU-2024:1264-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current gnutls Multiple Vulnerabilities (SSA:2025-039-01)

The version of gnutls installed on the remote host is prior to 3.8.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-039-01 advisory. New gnutls packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the precedin...

Fedora 41 : firefox (2025-13bbd34b51)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-13bbd34b51 advisory. - Updated to latest upstream 135.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

chromedriver-132.0.6834.83-1.1 on GA media (moderate)

chromedriver-132.0.6834.83-1.1 on GA media Announcement ID: openSUSE-SU-2025:14659-1 Rating: moderate Cross-References: CVE-2025-0434 CVE-2025-0435 CVE-2025-0436 CVE-2025-0437 CVE-2025-0438 CVE-2025-0439 CVE-2025-0440 CVE-2025-0441 CVE-2025-0442 CVE-2025-0443 CVE-2025-0446 CVE-2025-0447...

Fedora 41 : mingw-python-jinja2 (2025-dbe19a2b1f)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-dbe19a2b1f advisory. Update to jinja2-3.1.5. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE SLES12 Security Update : kernel (Live Patch 59 for SLE 12 SP5) (SUSE-SU-2025:0090-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0090-1 advisory. This update for the Linux Kernel 4.12.14-122225 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio:...

SDL2_sound-devel-2.0.4-1.1 on GA media (moderate)

SDL2sound-devel-2.0.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:14642-1 Rating: moderate Cross-References: CVE-2023-45676 CVE-2023-45677 CVE-2023-45681 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security...

Mozilla Firefox Security Update (mfsa_2025-01) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

CVE-2024-53180

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the default mmap fault handler A driver might allow the mmap access before initializing its runtime-dmaarea properly. Add a proper NULL check before passing to virttopage for avoiding a panic...

SUSE SLES15: docker-stable / docker-stable-bash-completion / etc (SUSE-SU-SUSE-RU-2024:4391-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-RU-2024:4391-1 advisory. - Update docker-buildx to v0.19.2. See upstream changelog online at . Some notable changelogs from the last...

govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media Announcement ID: openSUSE-SU-2024:14603-1 Rating: moderate Cross-References: CVE-2024-12289 CVE-2024-28053 CVE-2024-45338 CVE-2024-48872 CVE-2024-54083 CVE-2024-54682 CVE-2024-55885 CVE-2024-55949 Affected Products: openSUSE Tumbleweed An...

gstreamer-plugins-good-1.24.10-3.1 on GA media (moderate)

gstreamer-plugins-good-1.24.10-3.1 on GA media Announcement ID: openSUSE-SU-2024:14586-1 Rating: moderate Cross-References: CVE-2024-47539 CVE-2024-47543 CVSS scores: CVE-2024-47539 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-47543 SUSE : 6.2...

CVE-2024-53907

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...