GHSA-8GWM-58G9-J8PW vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-4C9V-RQPW-WRJ7 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

Fedora 44 : docker-buildx (2025-d6e22cfe3d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d6e22cfe3d advisory. Automatic update for docker-buildx-0.27.0-1.fc44. Changelog Wed Aug 20 2025 Bradley G Smith - 0.27.0-1 - Update to release v0.27.0 - Resolves: rhvz2388453,...

TencentOS Server 4: nodejs-nodemon (TSSA-2025:0644)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0644 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

GHSA-CHGM-7R52-WHJJ vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

Tenda AC6 V5.0 Firmware Signature Validation firmware update vulnerability

Talos Vulnerability Report TALOS-2025-2161 Tenda AC6 V5.0 Firmware Signature Validation firmware update vulnerability August 20, 2025 CVE Number CVE-2025-31355 SUMMARY A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A...

Ubuntu: Security Advisory (USN-7695-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2025-3867 Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence...

CVE-2023-4515 ksmbd: validate command request size

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed "ksmbd: validate command payload size", except for SMB2OPLOCKBREAKHE command, the request size of other commands is not checked, it's not expected. Fix it by add check f...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: infinispan, keycloak, seata, sonarqube, grpc-java-fips, elasticsearch-fips, celeborn, management-api-for-apache-cassandra-5.0, trino, management-api-for-apache-cassandra-4.1, apache-hop-fips, spark, hadoop-fips, localstack, elasticsearch, flyway,...

Fedora 43 : pymol (2025-3876147cc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3876147cc5 advisory. Automatic update for pymol-3.1.0-4.fc43. Changelog Mon Jun 2 2025 Antonio Trande - 3.1.0-4 - Fix rhbz2369768 Tue Feb 4 2025 Miroslav Such - 3.1.0-3 - Correct...

Fedora 43 : zsync (2025-bcf8a956fa)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bcf8a956fa advisory. Automatic update for zsync-0.6.2-3.fc43. Changelog Thu May 15 2025 Tobias Girstmair - 0.6.2-3 - fix zlib source path in patch file Thu May 15 2025...

HPESBGN04919 rev.2 - HPE Intel 700 Series, and I350 Ethernet Controllers, INTEL-SA-01335, Intel Ethernet Drivers for Linux Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intel I350-T4 Ethernet 1Gb 4-port BASE-T Adapter for HPE - Prior to 5.19.2 Intel I350-T4 Ethernet 1Gb 4-port BASE-T OCP3...

Fedora 42 : incus (2025-2edb6773ed)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2edb6773ed advisory. New release of Incus. Release information: https://github.com/lxc/incus/releases/tag/v6.15.0 Tenable has extracted the preceding description block...

Fedora 41 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2025-9988949ccd)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-9988949ccd advisory. Updated perl to version 5.40.3 https://metacpan.org/release/SHAY/perl-5.40.3/view/pod/perldelta.pod Tenable has extracted the preceding description block...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-101 (ALASKERNEL-5.10-2025-101)

The version of kernel installed on the remote host is prior to 5.10.240-238.959. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-101 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in...

RHEL 8 : pcs (RHSA-2025:13307)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13307 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rexml: REXML ReDoS...

Fedora 42 : moby-engine (2025-9e2840094a)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-9e2840094a advisory. Update to release v28.3.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Advisory ROSA-SA-2025-2947

software: libsoup 3.2.1 OS: ROSA-CHROME unaffected versions = libsoup-3.2.1-2 affected versions libsoup-3.2.1-2 CVE-ID: CVE-2025-32913 BDU-ID: 2025-06242 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the soupmessageheadersgetcontentdisposition function of the GNOME GUI libsoup library is related t...

Advisory ROSA-SA-2025-2943

Software: openh264 2.1.1 OS: ROSA-CHROME unaffected versions = openh264-2.1.1-3 affected versions openh264-2.1.1-3 CVE-ID: CVE-2025-27091 BDU-ID: 2025-02022 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the decoding functions of the OpenH264 library is related to a buffer overflow in dynamic...