EUVD-2024-44261

Malicious code in bioql PyPI...

EUVD-2023-33493

Malicious code in bioql PyPI...

EUVD-2022-39157

Malicious code in bioql PyPI...

EUVD-2022-37731

Malicious code in bioql PyPI...

EUVD-2023-42751

Malicious code in bioql PyPI...

SUSE CVE-2025-54286

Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...

CVE-2025-54293

Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links...

Photon OS 5.0: Linux PHSA-2025-5.0-0630

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0630. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-5.0-0631

Updates of 'open-vm-tools' packages of Photon OS have been released...

Photon OS 5.0: Sqlite PHSA-2025-5.0-0624

An update of the sqlite package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0624. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-5.0-0623

Updates of 'coredns' packages of Photon OS have been released...

BIT-MONGODB-2025-6707 Race condition in privilege cache invalidation cycle

Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior ...

Fedora: Security Advisory (FEDORA-2025-c73675b464)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-27234 Zabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0.

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution...

Important Photon OS Security Update - PHSA-2025-5.0-91-0615

Updates of 'rubygem-webrick' packages of Photon OS have been released...

Photon OS 5.0: Mariadb PHSA-2025-5.0-0613

An update of the mariadb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0613. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Moderate Photon OS Security Update - PHSA-2025-5.0-0613

Updates of 'mariadb' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0613

Updates of 'mariadb' packages of Photon OS have been released...

Security Bulletin: A vulnerability in form-data may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-7783)

Summary There is a vulnerability in form-data used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerabili...

Photon OS 5.0: Linux PHSA-2025-5.0-0610

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0610. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...