Debian: Security Advisory (DLA-4159-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for CVE-2023-50702

Vulnerability Advisory This is a documented notice that provid...

SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2025:1521-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1521-1 advisory. Update to Tomcat 9.0.104 - CVE-2025-31650: invalid priority field values should be ignored bsc1242008 - CVE-2025-3165...

CVE-2025-20197

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

RockyLinux 8 : cups (RLSA-2024:4265)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:4265 advisory. cups: Cupsd Listen arbitrary chmod 0140777 CVE-2024-35235 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. No...

Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2025-4597)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4597 advisory. cjose modauthopenidc 2.4.9.4-8 - Resolves: RHEL-87759 - Empty POST causes crash with OIDCPreservePost Tenable has extracted the preceding description block...

RockyLinux 9 : opensc (RLSA-2024:0966)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:0966 advisory. OpenSC: Side-channel leaks while stripping encryption PKCS1 padding CVE-2023-5992 Tenable has extracted the preceding description block directly from the RockyLin...

PT-2025-19922 · WordPress · Xavin'S List Subpages

Name of the Vulnerable Software and Affected Versions: Xavin's List Subpages plugin for WordPress versions up to and including 1.3 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the 'xls' shortcode. This allows authenticated...

F5 Networks BIG-IP : BIG-IP PEM vulnerability (K000149952)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2.2 / BIGIP-15.1.10.7.0.4.5-ENG. It is, therefore, affected by a vulnerability as referenced in the K000149952 advisory. When a BIG-IP PEM system is licensed with URL categorization, and the URL categorizatio...

F5 Networks BIG-IP : Appliance mode BIG-IP iControl REST and tmsh vulnerability (K000148591)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.7 / 16.1.6 / 17.1.2.2. It is, therefore, affected by a vulnerability as referenced in the K000148591 advisory. When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl RES...

Oracle Access Manager (April 2025 CPU)

The 12.2.1.4.0 versions of Access Manager installed on the remote host are affected by a vulnerability as referenced in the April 2025 CPU advisory. - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Proxy Apache Mina. The supported version that is affecte...

CBL Mariner 2.0 Security Update: cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device-plugin (CVE-2025-22872)

The version of cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device- plugin installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22872 advisory. - The...

Fedora 40 : nodejs-bash-language-server / nodejs-pnpm (2025-f68a9b835d)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-f68a9b835d advisory. Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to version 5.6.0 Tenable has extracted the preceding description block...

GHSA-MGVV-9P9G-3JV4

creationtimestamp| type| source ---|---|--- 2025-05-01 23:25:44+00:00| seen| https://gist.github.com/EliahKagan/c847476c5a1c15dac03b1ce9a010d2a1...

GHSA-MQQQ-H2X3-46FR

creationtimestamp| type| source ---|---|--- 2025-04-30 15:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14051 2025-04-30 16:07:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427772732716398...

CVE-2025-2759

creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-268/ 2025-05-22 01:42:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17215...

Amazon Linux 2 : apache-commons-vfs (ALAS-2025-2842)

The version of apache-commons-vfs installed on the remote host is prior to 2.0-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2842 advisory. Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a...

Amazon Linux 2 : qt (ALAS-2025-2847)

The version of qt installed on the remote host is prior to 4.8.5-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2847 advisory. In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPerEm initialization...

GHSA-R9GV-QFFM-XW6F

creationtimestamp| type| source ---|---|--- 2025-04-29 21:13:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13928...

Amazon Linux 2 : runc (ALASECS-2025-064)

The version of runc installed on the remote host is prior to 1.0.0-0.1.20200204.gitdc9208a. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-064 advisory. A flaw was found in runc. An attacker who controls the container image for two containers that share a volume...