CVE-2025-277457

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-266427

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-277447

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-298167

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-277467

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

Adobe Experience Manager 6.0 < 6.5 / 11.0 < 11.4 Arbitrary code execution (APSB25-32)

The version of Adobe Experience Manager installed on the remote host is prior to 11.4, 6.5. It is, therefore, affected by a vulnerability as referenced in the APSB25-32 advisory. - Cross-site Scripting Reflected XSS CWE-79 potentially leading to Arbitrary code execution CVE-2025-27205 Note that...

Fedora 41 : openvpn (2025-277b5e1d96)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-277b5e1d96 advisory. Update to upstream OpenVPN 2.6.14 Fixes CVE-2025-2704 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

a2 (>=0.5.0-alpha.1, <=0.5.3), aahc (0.1.0) +4943 more potentially affected by unknown CVE via tokio (>=0.2.5, <=1.38.1)

tokio CARGO version =0.2.5, =0.5.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RR8G-9FPQ-6WMG...

Fedora 40 : exim (2025-3a56fe6159)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3a56fe6159 advisory. This is an update fixing CVE 2025-30232. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

RHEL 9 : kernel (RHSA-2025:3506)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3506 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: md: fix deadlock between mddevsuspend a...

Fedora 40 : matrix-synapse (2025-cef83410f7)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-cef83410f7 advisory. Backport fixes from v1.127.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +65 more potentially affected by unknown CVE via openssl (>=0.10.40, <=0.10.68)

openssl CARGO version =0.10.40, =0.5.0, =0.2.0, =0.0.1, =0.1.0-alpha.0, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.1.3, =0.1.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4FCV-W3QC-PPGG...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +57 more potentially affected by CVE-2025-31486 via vite (>=6.0.0, <=6.0.11)

vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.38 and more Sour...

AlmaLinux 9 : expat (ALSA-2025:3531)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:3531 advisory. libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 Tenable has extracted the preceding description block directly from t...

Canon Printers Buffer Overflow Vulnerability (CP2024-002)

A buffer overflow vulnerability have been identified for certain Canon Small Office Multifunction Printers and Laser Printers. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

@alizeait/unflatto Prototype Pollution

Impact alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties. Patches The problem has been patch...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to improper handling of specific path conditions in the authentication process, where the path does not contain / and contains .. An attacker can gain unauthorized access and...

CVE-2025-24182

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-193/...

CVE-2025-24230

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-190/ 2026-04-02 22:14:33+00:00| seen| Telegram/2E5zGnFDFPvCqW-8Fv5TCu3RrGIbsxTzgaNWgYN4u84o0k...

AlmaLinux 8 : grub2 (ALSA-2025:3367)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:3367 advisory. grub2: net: Out-of-bounds write in grubnetsearchconfigfile CVE-2025-0624 Tenable has extracted the preceding description block directly from the AlmaLinux security...