Important Photon OS Security Update - PHSA-2025-5.0-0595

Updates of 'bindutils', 'python3-tornado', 'python-tornado' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-92-0595

Updates of 'python3-tornado' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-4.0-0852

Updates of 'nginx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-4.0-0854

Updates of 'gnutls' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-4.0-0853

Updates of 'python3-tornado', 'python-tornado' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-5.0-0596

Updates of 'nginx' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2025-38356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Explicitly exit CT safe mode on unwind During driver probe we might be briefly...

Photon OS 5.0: Icu PHSA-2025-5.0-0578

An update of the icu package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0578. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid25227...

Photon OS 4.0: Libtiff PHSA-2025-4.0-0848

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0848. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Mozilla Firefox ESR < 140.2

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-67 advisory. - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ES...

Linux Distros Unpatched Vulnerability : CVE-2020-1953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special...

Photon OS 4.0: Icu PHSA-2025-4.0-0846

An update of the icu package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0846. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid25226...

Linux Distros Unpatched Vulnerability : CVE-2024-48425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using...

Amazon Linux 2 : webkitgtk4 (ALAS-2025-2970)

The version of webkitgtk4 installed on the remote host is prior to 2.48.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2970 advisory. A cookie management issue was addressed with improved state management. This issue is fixed in watchOS 11, macOS Sequo...

CVE-2025-55589

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice...

GO-2025-3886 OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin

OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin...

Photon OS 5.0: Iperf PHSA-2025-5.0-0579

An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0579. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2018-2612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior...

Photon OS 5.0: Jq PHSA-2025-5.0-0567

An update of the jq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0567. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid251231...

Photon OS 4.0: Apache PHSA-2025-4.0-0850

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0850. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...