3620 matches found
postgresql security update
An update is available for postgresql. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostgreSQL is an advanced object-relational database management system DBM...
nano security update
An update is available for nano. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNU nano is a small and friendly text editor. Security Fixes: nano: running chmo...
RLSA-2024:9405 Low: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap-based buffer overflow vulnerability CVE-2021-3903 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages...
CVE-2025-2354 VAM Virtual Airlines Manager index.php cross site scripting
A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...
CVE-2025-2349
The CVE describes a vulnerability in IROAD Dash Cam FX2 (up to 20250308) affecting an unknown function in the Password Hash Handler that processes /etc/passwd. The issue leads to a password hash with insufficient computational effort. Attack requires local network access and is characterized as h...
Fedora 41 : kitty (2025-756c627691)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-756c627691 advisory. Update to 0.40.0 https://sw.kovidgoyal.net/kitty/changelog/detailed-list-of-changes Tenable has extracted the preceding description block directly from the...
CVE-2025-26961
CVE-2025-26961 affects the WordPress plugin “Fresh Framework” (versions up to 1.70.0). The issue is a Missing Authorization vulnerability that allows accessing functionality not properly constrained by ACLs due to inadequate authorization checks. The CVE describes unauthenticated access with high...
RHEL 8 : grub2 (RHSA-2025:2784)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2784 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...
CVE-2025-2221
creationtimestamp| type| source ---|---|--- 2025-03-14 09:00:27+00:00| seen| Telegram/MoLM8hQiaQO2UtPbaOFwMBQpRxYe0wTCLGhlDqNNXet-jys 2025-03-14 10:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkdgd6txb426 2025-03-14 10:51:27+00:00| seen| https://t.me/cvedetector/20281...
CVE-2025-30022
CM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via the DATANASC parameter...
CVE-2024-12380
Removed by vendor...
Siemens SCALANCE X-200RNA Switch Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2015-3197)
ssl/s2srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the getclientmasterkey and...
Palo Alto GlobalProtect App Windows 6.0.x < 6.0.12 / 6.1.x / 6.2.x < 6.2.6 / 6.3.x < 6.3.3 Local Privilege Escalation (CVE-2025-0117)
The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.0.x prior to 6.0.12, 6.1.x, 6.2.x prior to 6.2.6, or 6.3.x prior to 6.3.3. It is, therefore, affected by a local privilege escalation vulnerability: - A reliance on untrusted input for a security decision in the...
Oracle Linux 8 : krb5 (ELSA-2025-2722)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2722 advisory. - Prevent overflow when calculating ulog block size CVE-2025-24528 Resolves: RHEL-78248 Tenable has extracted the preceding description block directly from the...
CVE-2025-21844
In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for nextbuffer in receiveencryptedstandard Add check for the return value of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereference...
CVE-2025-21866 powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VMALLOC Erhard reported the following KASAN hit while booting his PowerMac G4 with a KASAN-enabled kernel 6.13-rc6: BUG: KASAN: vmalloc-out-of-bounds in...
grafana-11.5.2-1.1 on GA media (moderate)
grafana-11.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14865-1 Rating: moderate Cross-References: CVE-2025-27144 CVSS scores: CVE-2025-27144 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-27144 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
CVE-2025-28938
CVE-2025-28938 describes a Missing Authorization vulnerability in the WordPress plugin WP Performance Pack (affected:
CVE-2025-28860
CVE-2025-28860 – Google News Editors Picks Feed Generator is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin Google News Editors Picks Feed Generator (versions up to 2.1). The issue arises from insufficient validation of requests, enabling a CSRF attacker to trigger stored XSS w...