Photon OS 4.0: Vim PHSA-2025-4.0-0812

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0812. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid23829...

Security Updates for Microsoft Visual Studio 2022 Products (June 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network. CVE-2025-30399 - Improper neutralization of...

Photon OS 4.0: Ruby PHSA-2025-4.0-0813

An update of the ruby package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0813. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1662)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: gso: fix ownership in udpgsosegmentCVE-2025-21926 usbnet: gl620a: fix endpoint checking in genelinkbind.CVE-2025-21877 netsched: Prevent...

Security Updates for Microsoft Visual Studio 2022/2019 Products (May 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by network spoofing vulnerability where External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...

MGASA-2025-0186 Updated mariadb packages fix security vulnerabilities

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to makeaggrtablesinfo and optimizestage2 - CVE-2023-52969. MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through...

CVE-2025-4922

Nomad Community and Nomad Enterprise “Nomad” prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enterprise 1.10.2, 1.9.10, and 1.8.14...

KLA84828 OSI vulnerability in Microsoft Apps

An information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-32711 Related products Microsoft-Copilot-Studio CVE list CVE-2025-32711 critical KB list...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-1620)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jun 2025)

This host is missing a critical security update according to Microsoft Office Click-to-Run update June 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious person could exploit the vulnerabilities to execute arbitrary code with victim privileges. Since it cannot be ruled out that developers work with elevated privileges, it is plausible that execution of arbitrary code could...

TPM 2.0 Reference Code Vulnerability – Firmware TPMs - Lenovo Support US

No description provided...

CVE-2025-49142 Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot, a...

CVE-2025-47166

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:27:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbmr6imac2c 2025-06-10 23:33:06+00:00| seen|...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in several products such as RUGGEDCOM, SCALANCE, SIMATIC and Tecnomatix The vulnerabilities potentially enable a malicious person to carry out attacks that could lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data -...

May 13, 2025—Hotpatch KB5058497 (OS Build 26100.3981)

None None...

May 13, 2025—KB5058403 (Monthly Rollup)

None None...

June 10, 2025—Hotpatch KB5060841 (OS Build 26100.4270)

None None...

May 13, 2025—KB5058451 (Monthly Rollup)

None None...

PT-2025-24615

Name of the Vulnerable Software and Affected Versions Avaya Call Management System versions 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0. Description An improper input validation in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web...