Fedora: Security Advisory (FEDORA-2026-9860efdad7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2022-3938:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3938:01 advisory. 389-ds-base: SIGSEGV in syncrepl CVE-2022-2850 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note...

MiracleLinux 8 : nodejs:18 (AXSA:2022-4553:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4553:01 advisory. nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 nodejs: DNS rebinding in inspect via invalid octal IP address CVE-2022-43548...

MiracleLinux 4 : abrt-2.0.8-26.0.1.AXS4, libreport-2.0.9-21.0.1.AXS4 (AXBA:2014-792:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXBA:2014-792:01 advisory. - LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to...

MiracleLinux 4 : ibutils-1.5.7-8.AXS4, libibverbs-1.1.7-1.AXS4, libmlx4-1.0.5-4.AXS4.1, librdmacm-1.0.17-1.AXS4, mpit (AXSA:2014-192:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-192:01 advisory. ibutils: provides IB network and path diagnostics. infinipath-psm: The PSM Messaging API, or PSM API, is QLogic's low-level user-level communications...

Ubuntu: Security Advisory (USN-7956-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2026-1015)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2025-55184 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...

Linux Distros Unpatched Vulnerability : CVE-2025-67480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This issue affects...

Oracle Linux 9 : pcs (ELSA-2025-20962)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20962 advisory. - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945,...

Linux Distros Unpatched Vulnerability : CVE-2025-66421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

@alstar/studio (0.0.0-beta.20), @better-auth/cli (1.3.34) +7 more potentially affected by CVE-2025-71402 via better-auth (1.3.34)

better-auth NPM version 1.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on better-auth and may be impacted: - @alstar/studio 0.0.0-beta.20 - @better-auth/cli 1.3.34 - @bgord/bun =1.0.8, =7.0.9-canary.2, =7.0.9-canary.2, =0.0.22, =0.8.2,...

AlmaLinux 8 : idm:DL1 (ALSA-2025:21140)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21140 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +28 more potentially affected by CVE-2025-64757 via astro (>=5.0.0-beta.5, <=5.14.1)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.0-dev-20250414184926, =1.13.2, =0.0.1, =0.0.1, =1.0.21, =1.0.22 and more Source cves: CVE-2025-64757 Source advisory: SNYK:JS-ASTRO-14059139...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +32 more potentially affected by CVE-2025-64745 via astro (>=5.2.1, <=5.15.1)

astro NPM version =5.2.1, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.28, =0.0.40 and more Source cves: CVE-2025-64745 Source advisory: SNYK:JS-ASTRO-13961435...

Ubuntu: Security Advisory (USN-7853-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

builder-addon-pca (>=0.0.1, <=0.0.3), configparser-crypt (>=0.6.2, <=1.1.0) +5 more potentially affected by CVE-2025-63675 via cryptidy (1.2.4)

cryptidy PYPI version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptidy and may be impacted: - builder-addon-pca =0.0.1, =0.6.2, =1.4.0, =0.2.0, =2.2.0rc6, =0.9.0, =0.0.4, =1.0.6 Source cves: CVE-2025-63675 Source advisory:...

@akash-aw/aw-wizard-forms (4.14.0), @alfresco/aca-generators (>=1.0.0, <=1.0.1) +80 more potentially affected by CVE-2025-62595 via koa (3.0.1)

koa NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @akash-aw/aw-wizard-forms 4.14.0 - @alfresco/aca-generators =1.0.0, =1.0.0, =0.44.0, =2.23.0, =3.10.0-beta.6, =0.4.0, =0.30.0, =0.3.0-alpha.1, =0.4.3,...

EUVD-2025-27546

Malicious code in bioql PyPI...

Ubuntu: Security Advisory (USN-7792-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...