The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0041 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-26594:
    A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a     global variable. If a client frees the root cursor, the internal reference points to freed memory and     causes a use-after-free.

    CVE-2025-26595:
    A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-     sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to     check the bounds of the buffer and would copy the data regardless of the size.

    CVE-2025-26596:
    A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms()     differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.

    CVE-2025-26597:
    A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group,     it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is     later called with a non-zero value of groups, this will cause a buffer overflow because the key actions     are of the wrong size.

    CVE-2025-26598:
    An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for     the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match     was found. However, the code will return the last element of the list if no matching device ID is found,     which can lead to out-of-bounds memory access.

    CVE-2025-26599:
    An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function     compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow()     will return a BadAlloc error without validating the window tree marked just before, which leaves the     validated data partly initialized and the use of an uninitialized pointer later.

    CVE-2025-26600:
    A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the     events queued for that device remain while the device is freed. Replaying the events will cause a use-     after-free.

    CVE-2025-26601:
    A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change     mask are evaluated one after the other, changing the trigger values as requested, and eventually,     SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not     adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0076 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-9632:
    A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges.

    CVE-2025-26594:
    A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a     global variable. If a client frees the root cursor, the internal reference points to freed memory and     causes a use-after-free.

    CVE-2025-26595:
    A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-     sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to     check the bounds of the buffer and would copy the data regardless of the size.

    CVE-2025-26596:
    A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms()     differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.

    CVE-2025-26597:
    A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group,     it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is     later called with a non-zero value of groups, this will cause a buffer overflow because the key actions     are of the wrong size.

    CVE-2025-26598:
    An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for     the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match     was found. However, the code will return the last element of the list if no matching device ID is found,     which can lead to out-of-bounds memory access.

    CVE-2025-26599:
    An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function     compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow()     will return a BadAlloc error without validating the window tree marked just before, which leaves the     validated data partly initialized and the use of an uninitialized pointer later.

    CVE-2025-26600:
    A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the     events queued for that device remain while the device is freed. Replaying the events will cause a use-     after-free.

    CVE-2025-26601:
    A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change     mask are evaluated one after the other, changing the trigger values as requested, and eventually,     SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not     adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function     compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow()     will return a BadAlloc error without validating the window tree marked just before, which leaves the     validated data partly initialized and the use of an uninitialized pointer later.(CVE-2025-26599)

    A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms()     differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer     overflow.(CVE-2025-26596)

    A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group,     it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is     later called with a non-zero value of groups, this will cause a buffer overflow because the key actions     are of the wrong size.(CVE-2025-26597)

    An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for     the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match     was found. However, the code will return the last element of the list if no matching device ID is found,     which can lead to out-of-bounds memory access.(CVE-2025-26598)

    A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a     global variable. If a client frees the root cursor, the internal reference points to freed memory and     causes a use-after-free.(CVE-2025-26594)

    A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-     sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to     check the bounds of the buffer and would copy the data regardless of the size.(CVE-2025-26595)

    A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the     events queued for that device remain while the device is freed. Replaying the events will cause a use-     after-free.(CVE-2025-26600)

    A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change     mask are evaluated one after the other, changing the trigger values as requested, and eventually,     SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not     adding the new sync object, possibly causing a use-after-free when the alarm eventually     triggers.(CVE-2025-26601)

Tenable has extracted the preceding description block directly from the EulerOS xorg-x11-server security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7165 advisory.

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)
      * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
      * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
      * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
      * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
      * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
      * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
      * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
      * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7163 advisory.

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)
      * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
      * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
      * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
      * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
      * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
      * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
      * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
      * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0731-1 advisory.

    - CVE-2025-26594: Use-after-free of the root cursor (bsc#1237427).
    - CVE-2025-26595: Buffer overflow in XkbVModMaskText() (bsc#1237429).
    - CVE-2025-26596: Heap overflow in XkbWriteKeySyms() (bsc#1237430).
    - CVE-2025-26597: Buffer overflow in XkbChangeTypesOfKey() (bsc#1237431).
    - CVE-2025-26598: Out-of-bounds write in CreatePointerBarrierClient() (bsc#1237432).
    - CVE-2025-26599: Use of uninitialized pointer in compRedirectWindow() (bsc#1237433).
    - CVE-2025-26600: Use-after-free in PlayReleasedEvents() (bsc#1237434).
    - CVE-2025-26601: Use-after-free in SyncInitTrigger() (bsc#1237435).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5872 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5872-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     February 28, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : xorg-server     CVE ID         : CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 CVE-2025-26597                      CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 CVE-2025-26601     Debian Bug     : 1098906

    Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server,     which may result in privilege escalation if the X server is running     privileged.

    For the stable distribution (bookworm), these problems have been fixed in     version 2:21.1.7-3+deb12u9.

    We recommend that you upgrade your xorg-server packages.

    For the detailed security status of xorg-server please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/xorg-server

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4072 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4072-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     March 01, 2025                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : xorg-server     Version        : 2:1.20.11-1+deb11u15     CVE ID         : CVE-2025-26594 CVE-2025-26595 CVE-2025-26596                      CVE-2025-26597 CVE-2025-26598 CVE-2025-26599                      CVE-2025-26600 CVE-2025-26601


    Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server,     which may result in privilege escalation if the X server is running     privileged.


    For Debian 11 bullseye, these problems have been fixed in version     2:1.20.11-1+deb11u15.

    We recommend that you upgrade your xorg-server packages.

    For the detailed security status of xorg-server please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/xorg-server

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2500 advisory.

    - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor       Resolves: RHEL-79406
    - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()       Resolves: RHEL-80018
    - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()       Resolves: RHEL-79391
    - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()       Resolves: RHEL-80029
    - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()       Resolves: RHEL-79374
    - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()       Resolves: RHEL-80043
    - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()       Resolves: RHEL-80037

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2880 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)

    * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)

    * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)

    * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)

    * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)

    * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)

    * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)

    * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2865 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)

    * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)

    * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)

    * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)

    * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)

    * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)

    * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)

    * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-892 advisory.

    A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a     global variable. If a client frees the root cursor, the internal reference points to freed memory and     causes a use-after-free. (CVE-2025-26594)

    A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-     sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to     check the bounds of the buffer and would copy the data regardless of the size. (CVE-2025-26595)

    A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms()     differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.
    (CVE-2025-26596)

    A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group,     it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is     later called with a non-zero value of groups, this will cause a buffer overflow because the key actions     are of the wrong size. (CVE-2025-26597)

    An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for     the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match     was found. However, the code will return the last element of the list if no matching device ID is found,     which can lead to out-of-bounds memory access. (CVE-2025-26598)

    An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function     compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow()     will return a BadAlloc error without validating the window tree marked just before, which leaves the     validated data partly initialized and the use of an uninitialized pointer later. (CVE-2025-26599)

    A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the     events queued for that device remain while the device is freed. Replaying the events will cause a use-     after-free. (CVE-2025-26600)

    A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change     mask are evaluated one after the other, changing the trigger values as requested, and eventually,     SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not     adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers.
    (CVE-2025-26601)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7165 advisory.

    Xwayland is an X server for running X clients under Wayland.

    Security Fix(es):

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

    * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)

    * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)

    * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)

    * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)

    * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)

    * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)

    * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)

    * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
236186	Alibaba Cloud Linux 3 : 0041: tigervnc (ALINUX3-SA-2025:0041)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	high
237274	Alibaba Cloud Linux 3 : 0076: xorg-x11-server-Xwayland (ALINUX3-SA-2025:0076)	Nessus	Alibaba Cloud Linux Local Security Checks	5/27/2025	5/27/2025	high
241014	EulerOS 2.0 SP13 : xorg-x11-server (EulerOS-SA-2025-1697)	Nessus	Huawei Local Security Checks	6/30/2025	6/30/2025	high
241268	AlmaLinux 9 : xorg-x11-server-Xwayland (ALSA-2025:7165)	Nessus	Alma Linux Local Security Checks	7/3/2025	7/3/2025	high
241270	AlmaLinux 9 : xorg-x11-server (ALSA-2025:7163)	Nessus	Alma Linux Local Security Checks	7/3/2025	7/3/2025	high
216899	SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2025:0731-1)	Nessus	SuSE Local Security Checks	2/27/2025	2/28/2025	high
216946	Debian dsa-5872 : xnest - security update	Nessus	Debian Local Security Checks	2/28/2025	2/28/2025	high
216947	Debian dla-4072 : xdmx - security update	Nessus	Debian Local Security Checks	2/28/2025	2/28/2025	high
232555	Oracle Linux 9 : tigervnc (ELSA-2025-2500)	Nessus	Oracle Linux Local Security Checks	3/10/2025	9/11/2025	high
233228	RHEL 8 : tigervnc (RHSA-2025:2880)	Nessus	Red Hat Local Security Checks	3/22/2025	6/5/2025	high
233245	RHEL 8 : tigervnc (RHSA-2025:2865)	Nessus	Red Hat Local Security Checks	3/22/2025	6/5/2025	high
233585	Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2025-892)	Nessus	Amazon Linux Local Security Checks	3/31/2025	3/31/2025	high
237329	RHEL 9 : xorg-x11-server-Xwayland (RHSA-2025:7165)	Nessus	Red Hat Local Security Checks	5/27/2025	6/5/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high

high