Photon OS 5.0: Gnutls PHSA-2025-5.0-91-0480

An update of the gnutls package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0480. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-69437

Name of the Vulnerable Software and Affected Versions Apache Ranger Client Code versions prior to 2.9.0 Description An issue exists in the client code where TLS hostname verification is not properly performed. TLS Transport Layer Security hostname verification is a process that ensures the server...

Web Server Detection (HTTP/3)

Nessus was able to detect that the remote service supports HTTP/3 by\n' 'sending an HTTP/3 request and receiving a valid response in reply. TRUSTED...

PT-2026-69857

Name of the Vulnerable Software and Affected Versions use-context-selector affected versions not specified Description Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits that executed remote attacker-controlled code on developer machines during npm...

CVE-2026-65942: Improper Validation of Certificate with Host Mismatch

TLS hostname verification issue in Apache Ranger Client Code in versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

ownsite-assessor

OwnSite Assessor Authorized defensive security assessment...

MITM (Man-in-the-Middle) org.apache.tomcat:tomcat-coyote-ffm Dependency in Confluence Data Center

This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This High severity MITM Man-in-the-Middle vulnerability was introduced in versions 8.9.7, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0,...

Antiphishing v31231970767

DONATE - DASHBOARD VECTORS - CONTRIBUTING - SUBMIT A VECTOR - REST API CTI - WIKI Protect against phishing attacks Functionality This rule is built using malicious URLs and domains involved in phishing attacks. We utilize some community APIs and NRD Newly Registered Domain to construct these...

Antiphishing v31190644862

DONATE - DASHBOARD VECTORS - CONTRIBUTING - SUBMIT A VECTOR - REST API CTI - WIKI Protect against phishing attacks Functionality This rule is built using malicious URLs and domains involved in phishing attacks. We utilize some community APIs and NRD Newly Registered Domain to construct these...

Exploit for Use After Free in Exim

CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root...

JLSEC-2026-1211 A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might...

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

SUSE-SU-2026:23172-1 Security update for openssl-3

This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

MAL-2026-13626 Malicious code in @mrbenty8jf1p9y5/oidc-bind-canary (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9ed4acf296e53ad5955f759a0f0692d641781b1bd4e67ada1c116216f96fc3 The package's postinstall lifecycle script issues an HTTPS request from the installer's machine to a Cloudflare tunnel at...

SUSE-SU-2026:23058-1 Security update for openssl-3

This update for openssl-3 fixes the following issue: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

Antiphishing v31144104768

DONATE - DASHBOARD VECTORS - CONTRIBUTING - SUBMIT A VECTOR - REST API CTI - WIKI Protect against phishing attacks Functionality This rule is built using malicious URLs and domains involved in phishing attacks. We utilize some community APIs and NRD Newly Registered Domain to construct these...

CVE-2026-49006

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...

PT-2026-80716

This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

PT-2026-76733

This update for openssl-3 fixes the following issue: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

CVE-2026-49006: Use of Hard-coded Cryptographic Key

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...

PT-2026-68880

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An attacker can obtain credentials related to TLS transmission Transport Layer Security, a protocol that provides communications security over a computer network...