HPESBNW04818 rev.1 - HPE Aruba Networking AOS-CX Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Disclosure of Privileged Information; Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series Please refer to vulnerability summary Aruba CX 4100i Switch Series Plea...

Advisory ROSA-SA-2025-2784

Software: libXpm 3.5.12 OS: ROSA Virtualization 3.0 packageevrstring: libXpm-3.5.12-11.rv30 CVE-ID: CVE-2023-43788 BDU-ID: 2023-06887 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the XpmCreateXpmImageFromBuffer function of the X Pixmap Image File XPM libXpm library is related to reading data...

Siemens SCALANCE LPE9403 Improper Neutralization of Special Elements Used in an OS Command (CVE-2025-27392)

Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly- privileged remote attacker to execute arbitrary code on the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

GHSA-XC76-5PF9-MX8M

creationtimestamp| type| source ---|---|--- 2025-03-15 21:45:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7692...

CVE-2025-1652

creationtimestamp| type| source ---|---|--- 2025-03-13 19:48:20+00:00| seen| https://t.me/cvedetector/20242 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-163/ 2025-04-04 13:35:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10446...

CVE-2025-1649

creationtimestamp| type| source ---|---|--- 2025-03-13 19:42:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7471 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-159/ 2025-04-24 21:07:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13344...

Siemens SCALANCE X-200RNA Switch Devices NULL Pointer Dereference (CVE-2015-0288)

The X509toX509REQ function in crypto/x509/x509req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service NULL pointer dereference and application crash via an invalid certificate key. This plugin only works...

Oracle Linux 8 : .NET / 9.0 (ELSA-2025-2667)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2667 advisory. 9.0.104-1.0.1 - Add support for Oracle Linux 9.0.104-1 - Update to .NET SDK 9.0.104 and Runtime 9.0.3 - Resolves: RHEL-81645 Tenable has extracted the preceding...

Siemens SCALANCE X-200RNA Switch Devices Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-3735)

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g. This plugin onl...

Siemens SCALANCE X-200RNA Switch Devices Improper Input Validation (CVE-2016-6302)

The tlsdecryptticket function in ssl/t1lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short. This plugin only works with Tenable.ot. Please visit...

CVE-2025-240757

creationtimestamp| type| source ---|---|--- 2025-03-11 17:44:43+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0080...

CVE-2025-240707

creationtimestamp| type| source ---|---|--- 2025-03-11 17:44:07+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0079...

CVE-2025-240437

creationtimestamp| type| source ---|---|--- 2025-03-11 17:44:07+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0079...

CVE-2025-23398

creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:13+00:00| seen| Telegram/vEDVNGCPAWGffCLhscI9wuBjXzU-UJ-Kd2wneJcY77ehoc 2025-03-11 13:26:56+00:00| seen| https://t.me/cvedetector/20077 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-01...

CVE-2025-27438

creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:11+00:00| seen| Telegram/BUC-FpXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc 2025-03-11 13:26:38+00:00| seen| https://t.me/cvedetector/20065 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-01...

RHEL 8 / 9 : OpenShift Container Platform 4.15.38 (RHSA-2024:8994)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8994 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26596)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26596 advisory. - A heap overflow flaw was found in X.Org and Xwayland. The computation of...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26600)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26600 advisory. - A use-after-free flaw was found in X.Org and Xwayland. When a device is...

CVE-2025-2015

creationtimestamp| type| source ---|---|--- 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-116/...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2025:0798-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0798-1 advisory. - CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion bsc1233894. Tenable has extract...