Photon OS 5.0: Python3 PHSA-2025-5.0-0534

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0534. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Spring Framework 6.0.5 - 6.0.28, 6.1.0 - 6.1.20, 6.2.0 - 6.2.7 RFD Vulnerability - Windows

The VMware Spring Framework is prone to a reflected file download RFD vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Photon OS 4.0: Sqlite PHSA-2025-4.0-0790

An update of the sqlite package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0790. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Spring Framework 6.0.5 - 6.0.28, 6.1.0 - 6.1.20, 6.2.0 - 6.2.7 RFD Vulnerability - Linux

The VMware Spring Framework is prone to a reflected file download RFD vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-41233

Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity range https://www.broadcom.com/support/vmware-services/security-response with a maximum CVSSv3 base score of 6.8...

CVE-2025-41233

Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity range https://www.broadcom.com/support/vmware-services/security-response with a maximum CVSSv3 base score of 6.8...

CVE-2025-41233

CVE-2025-41233 affects VMware Avi Load Balancer. An authenticated attacker can trigger blind SQL injection in versions 30.1.1, 30.1.2, 30.2.1, and 30.2.2 due to improper input validation, enabling unauthorized DB access. Impact described as moderate (CVSSv3 base score up to 6.8). Remediation requ...

CVE-2025-41233

Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity range https://www.broadcom.com/support/vmware-services/security-response with a maximum CVSSv3 base score of 6.8...

Photon OS 4.0: Ruby PHSA-2025-4.0-0813

An update of the ruby package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0813. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Systemd PHSA-2025-4.0-0813

An update of the systemd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0813. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Spring Framework 安全漏洞

VMware Spring Framework is a set of open source Java, JavaEE application frameworks from VMware. The framework helps developers build high-quality applications. A security vulnerability exists in VMware Spring Framework versions 6.0.5 through 6.2.7, which stems from uncleaned user input in...

CVE-2025-22245

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...

CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...

CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...

CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...

CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...

CVE-2025-22245

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...

CVE-2025-22245

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...

CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...

CVE-2025-22245

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...