ALSA-2025:11036 Moderate: python-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Grafana Labs < 10.4.17+security-01, 11.2.8+security-01, 11.3.5+security-01, 11.4.3+security-01, 11.5.3+security-01, 11.6.0+security-01 Improper Authorization (CVE-2025-3454)

The version of Grafana Labs installed on the remote host is affected by improper authorization vulnerability as referenced in the CVE-2025-3454 advisory. - This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL...

CVE-2025-51658

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSInquiryView.php...

K000152565: Golang-JWT vulnerability CVE-2025-30204

Security Advisory Description golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a...

Fedora 41 : salt (2025-b712778148)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b712778148 advisory. Contains fixes for regressions introduced during CVE bugfix update 3007.4. Tenable has extracted the preceding description block directly from the Fedora...

CVE-2025-7453

A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...

CBL Mariner 2.0 Security Update: gdk-pixbuf2 (CVE-2025-6199)

The version of gdk-pixbuf2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6199 advisory. - A flaw was found in the GIF parser of GdkPixbuf's LZW decoder. When an invalid symbol is encountered...

CVE-2025-50125

A CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthenticated remote code execution when the server is accessed via the network with knowledge of hidden URLs and manipulation of host request header...

WordPress WordPress-WPJobBoard <= 25.07010000-WP6.8.1-JB5.11.5 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by timomangcut in WordPress Plugin WordPress-WPJobBoard versions = 25.07010000-WP6.8.1-JB5.11.5...

WordPress WP-BusinessDirectory <= 3.1.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin WP-BusinessDirectory versions = 3.1.4...

Exploit for Path Traversal in Apache Ofbiz

📌 Apache OFBiz RCE Exploit CVE-2024-38856 Ce script Python...

Azure Linux 3.0 Security Update: glibc (CVE-2024-33602)

The version of glibc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-33602 advisory. - nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's nscd netgrou...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22035)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22035 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-1797)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Linux 3.0 Security Update: libvirt (CVE-2024-4418)

The version of libvirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4418 advisory. - A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the...

CBL Mariner 2.0 Security Update: yasm (CVE-2023-37732)

The version of yasm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-37732 advisory. - Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows t...

CBL Mariner 2.0 Security Update: grub2 (CVE-2025-0624)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0624 advisory. - A flaw was found in grub2. During the network boot process, when trying to search for the configuration file,...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38152)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38152 advisory. - In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear tablesz when...

AlmaLinux 8 : go-toolset:rhel8 (ALSA-2025:10672)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:10672 advisory. net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 Tenable has extracted the preceding description block directly from the...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-32909)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32909 advisory. - A flaw was found in libsoup. SoupContentSniffer May be vulnerable to a NULL pointer dereference in the...