Linux Distros Unpatched Vulnerability : CVE-2022-22950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cau...

Linux Distros Unpatched Vulnerability : CVE-2017-15418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process...

macOS 13.x < 13.7.8 (124929)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.7.8. It is, therefore, affected by a vulnerability: - Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticat...

Linux Distros Unpatched Vulnerability : CVE-2020-2923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily...

Important Photon OS Security Update - PHSA-2025-4.0-0855

Updates of 'git' packages of Photon OS have been released...

Photon OS 4.0: Linux PHSA-2025-4.0-0844

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0844. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-5.0-0597

Updates of 'libssh', 'postgresql14', 'postgresql13', 'postgresql15' packages of Photon OS have been released...

PT-2025-34126 · Strongdm · Strongdm Macos Client

Name of the Vulnerable Software and Affected Versions: StrongDM macOS client affected versions not specified Description: The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message...

PT-2025-34167 · Mcp-Cli · Mcp-Cli

Name of the Vulnerable Software and Affected Versions: wong2 mcp-cli version 1.13.0 Description: A flaw has been identified in the redirectToAuthorization function within the oAuth Handler component, specifically in the file /src/oauth/provider.js. This manipulation results in OS command injectio...

The vulnerability of the implementation of the Point-to-Point Protocol (PPP) on the Windows operating system allows a perpetrator to increase their privileges.

The vulnerability of the Point-to-Point Protocol PPP implementation in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the StateRepository service in the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the StateRepository service in the Windows operating system is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to increase their privileges...

Critical Photon OS Security Update - PHSA-2025-4.0-0856

Updates of 'libssh', 'docker' packages of Photon OS have been released...

VulnCheck KEV: CVE-2025-55177

Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to the pointer manipulation of NULL. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

Photon OS 5.0: Nginx PHSA-2025-5.0-0596

An update of the nginx package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0596. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

macOS 15.x < 15.6.1 (124927)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.6.1. It is, therefore, affected by a vulnerability: - Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticat...

Photon OS 4.0: Nginx PHSA-2025-4.0-0852

An update of the nginx package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0852. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-9176 neurobin shc Environment Variable shc.c make os command injection

A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the...

CVE-2025-9174

The CVE describes a local OS command-injection in neurobin shc ≤ 4.0.3, caused by unsafe handling in the make function of src/shc.c (Filename Handler). Public exploit details indicate local access is required; exploitation has been disclosed. Impact includes potential compromise of confidentialit...