Fedora 40 : mediawiki (2025-11277f6779)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-11277f6779 advisory. https://lists.wikimedia.org/hyperkitty/list/wikitech- [email protected]/thread/PFTE5RHUERS6KTUGGRZO7XXV5THNJ77E/...

AlmaLinux 9 : java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5 (Medium) (ALSA-2025:0426)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0426 advisory. JDK: Enhance array handling CVE-2025-21502 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that Nessus ha...

Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2025-820)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-820 advisory. 2025-02-12: CVE-2024-11079 was removed from this advisory. 2025-02-12: The severity of this advisory has been changed from medium to low. Tenable has extracted the preceding description block directly...

Amazon Linux 2 : python-jinja2 (ALAS-2025-2734)

The version of python-jinja2 installed on the remote host is prior to 2.7.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2734 advisory. Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls t...

Oracle Business Intelligence Publisher 7.0 / 7.6 (OAS) (January 2025 CPU)

The versions of Oracle Business Intelligence Publisher OAS installed on the remote host are affected by a vulnerability as referenced in the January 2025 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Development Operations Spring Framework...

Oracle Linux 8 / 9 : java-21-openjdk (ELSA-2025-0426)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0426 advisory. 1:21.0.6.0.7-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.6.0.7-1 - Update to jdk-21.0.6+7 GA - Update release notes to 21.0.6+7 - Sync the cop...

BELL-CVE-2025-23083

Bulletin has no description...

OpenJDK 8 <= 8u432 / 11.0.0 <= 11.0.25 / 17.0.0 <= 17.0.13 / 21.0.0 <= 21.0.5 / 23.0.0 <= 23.0.1 Vulnerability (2025-01-21)

The version of OpenJDK installed on the remote host is 8 prior to 8u432 / 11.0.0 prior to 11.0.25 / 17.0.0 prior to 17.0.13 / 21.0.0 prior to 21.0.5 / 23.0.0 prior to 23.0.1. It is, therefore, affected by a vulnerability as referenced in the 2025-01-21 advisory. Please Note: Java CVEs do not alwa...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2025-0422)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0422 advisory. 1:17.0.14.0.7-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.14.0.7-3 - Set rpmrelease to 3 - Revert 'Require tzdata-java 2024b at runtime and fo...

RHEL 8 : redis:6 (RHSA-2025:0640)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0640 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2025:0217-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0217-1 advisory. Update to version 1.61.0: Release notes - https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.61.0 -...

PT-2025-1970 · WordPress · Adforest

Name of the Vulnerable Software and Affected Versions: AdForest theme for WordPress versions up to, and including, 5.1.8 Description: The AdForest theme for WordPress is vulnerable to authentication bypass due to the plugin not properly verifying a user's identity prior to logging them in as that...

Debian dla-3685 : debian-security-support - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3685 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3685-1 [email protected] https://www.debian.org/lts/security/...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +1860 more potentially affected by CVE-2025-22150 via undici (>=6.0.0, <=6.21.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =0.5.21-beta.0, =0.5.21-beta.0, =0.1.0, =0.1.5 - @aivue/chatbot-storage 1.0.1 and more Source cves: CVE-2025-22150 Source advisory: OSV:GHSA-C76H-2CCP-4975...

GHSA-3JQ6-XC85-M394

creationtimestamp| type| source ---|---|--- 2025-01-21 19:26:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113867985802521990...

Debian dla-4016 : ucf - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4016 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4016-1 [email protected] https://www.debian.org/lts/security/...

RHEL 8 / 9 : Red Hat JBoss Web Server 6.0.5 (RHSA-2025:0342)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0342 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam_u2f (SUSE-SU-2025:0167-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0167-1 advisory. - CVE-2025-23013: Fixed problematic PAMIGNORE return values in pamsmauthenticate bsc1233517 Tenable has...

Zoom Workplace Desktop App < 6.2.5 Escalation of Privilege (ZSB-25004)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25004 advisory. - Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduc...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Apache Commons BCEL vulnerability (USN-7208-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7208-1 advisory. Felix Wilhelm discovered that Apache Commons BCEL APIs incorrectly handled parameters due to a memory issue. An attacker...