Photon OS 5.0: Python3 PHSA-2026-5.0-90-0763

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0763. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nodejs PHSA-2026-5.0-90-0755

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0755. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0770

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0770. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLSA-2026-1778546718 TuxCare security update for 90 packages (14 CVEs)

TuxCare rebuilt 90 packages to address 14 CVEs. Fixed in 9.4.50.v20221201-tuxcare.1...

Important Photon OS Security Update - PHSA-2026-5.0-90-0937

Updates of 'mysql' packages of Photon OS have been released...

CVE-2025-7386 Information exposure vulnerability in Hitachi Storage Navigator

Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: before DKCMAIN Ver. 90-09-24-00/00, SVP Ver. 90-09-24/00, before DKCMAIN Ver. 90-08-86-00/00, SVP Ver. 90-08-86/00; Hitachi...

PT-2026-53212

Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: before DKCMAIN Ver. 90-09-24-00/00, SVP Ver. 90-09-24/00, before DKCMAIN Ver. 90-08-86-00/00, SVP Ver. 90-08-86/00; Hitachi...

CVE-2026-39360

RustFS is a distributed object storage system built in Rust. Prior to alpha.90, RustFS contains a missing authorization check in the multipart copy path UploadPartCopy. A low-privileged user who cannot read objects from a victim bucket can still exfiltrate victim objects by copying them into an...

Critical Photon OS Security Update - PHSA-2026-5.0-90-0857

Updates of 'glibc', 'grub2' packages of Photon OS have been released...

CVE-2026-46745: Improper Neutralization of Special Elements used in an LDAP Query

Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability CWE-90 that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP...

Important Photon OS Security Update - PHSA-2026-5.0-90-0850

Updates of 'chromium' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-90-0842

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

EUVD-2026-19867

RustFS has an authorization bypass in multipart UploadPartCopy enables cross-bucket object exfiltration...

CVE-2026-39360 RustFS has an authorization bypass in multipart UploadPartCopy enables cross-bucket object exfiltration

RustFS is a distributed object storage system built in Rust. Prior to alpha.90, RustFS contains a missing authorization check in the multipart copy path UploadPartCopy. A low-privileged user who cannot read objects from a victim bucket can still exfiltrate victim objects by copying them into an...

MiracleLinux 4 : scsi-target-utils-1.0.4-3.AXS4.1 (AXSA:2011-90:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-90:01 advisory. The SCSI target package contains the daemon and tools to setup a SCSI targets. Currently, software iSCSI targets are supported. Security issues fixed with this...

Mozilla Firefox < 34.0

The version of Firefox installed on the remote Windows host is prior to 34.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-90 advisory. - jemalloc poisoning plus Apple uninitialized variable usage triggers keylogging in /tmp/ on OSX 10.10CVE-2014-1595 CVE-2014-1595...

Mozilla Firefox < 34.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 34.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-90 advisory. - jemalloc poisoning plus Apple uninitialized variable usage triggers keylogging in /tmp/ on OSX 10.10CVE-2014-1595...

Malicious code in billa-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7519d32e01563891863bfbe2737531af796010435515a408d467c660380f66e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153744 Malicious code in billa-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7519d32e01563891863bfbe2737531af796010435515a408d467c660380f66e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713543a59bf8f4047b3f8cbe9d0ae560ddcf82bb40c4b125d082ee34acb0c01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...