Moderate Photon OS Security Update - PHSA-2025-5.0-91-0663

Updates of 'binutils' packages of Photon OS have been released...

PT-2025-44403

Name of the Vulnerable Software and Affected Versions Dell Unity versions 5.4 and prior Description Dell Unity versions 5.4 and prior contain an Improper Neutralization of Special Elements used in an OS Command vulnerability, also known as an OS Command Injection issue. A low privileged attacker...

Important Photon OS Security Update - PHSA-2025-5.0-91-0662

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-90-0663

Updates of 'binutils' packages of Photon OS have been released...

PT-2025-44412

Name of the Vulnerable Software and Affected Versions Dell Unity versions 5.5 and prior Description Dell Unity versions 5.5 and prior contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' issue. A low privileged attacker with local access could...

Photon OS 5.0: Linux PHSA-2025-5.0-0662

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0662. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-10920

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

CVE-2025-62792 Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in wexpressionmatch when strlen is called on strtest, because the corresponding buffer is not being properly NULL terminated during its allocation in OSCleanMSG...

Photon OS 5.0: Curl PHSA-2025-5.0-0660

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0660. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-10561

The device is running an outdated operating system, which may be susceptible to known vulnerabilities...

Important Photon OS Security Update - PHSA-2025-5.0-0660

Updates of 'curl' packages of Photon OS have been released...

Photon OS 4.0: Python3 PHSA-2025-4.0-0895

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0895. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

HP ThinPro 安全漏洞

HP ThinPro is a Linux-based operating system from Hewlett-Packard HP in the United States. A security vulnerability exists in HP ThinPro version 8.1, which stems from a failure to validate a user's true identity...

The vulnerability of the Linux operating system’s Low-Level Transport driver allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s Low-Level Transport kernel driver is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

FastMCP 操作系统命令注入漏洞

FastMCP is an MCP server builder from the individual developer Jeremiah Lowin. An operating system command injection vulnerability exists in FastMCP versions prior to 2.13.0, which stems from the vulnerability of the servername field to a command injection attack that could result in the executio...

Photon OS 5.0: Python3 PHSA-2025-5.0-0657

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0657. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2025-36329

Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-61101

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextlinkrmtitfaddr function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

CVE-2025-46602

Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-12296

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be...