Solaris 10 (i386): 148242-08

SunOS 5.10: SunOS 5.10x86: statd patch. Date this patch was last updated by Sun : Jan/15/24 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255261; scriptversion"1.1";...

Solaris 10 (sparc): 151912-25

SunOS 5.10: SunOS 5.10: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Apr/14/25 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255269; scriptversion"1.1";...

Photon OS 4.0: Openjdk21 PHSA-2025-4.0-0860

An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0860. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openjdk21 PHSA-2025-5.0-0600

An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0600. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-34756 · Nozbe · Nozbe

Name of the Vulnerable Software and Affected Versions: Nozbe versions prior to 2025.11 Description: The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC Transparency,...

Solaris 10 (i386): 119784-51

SunOS 5.10: SunOS 5.10x86: BIND patch. Date this patch was last updated by Sun : Jan/15/24 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255258; scriptversion"1.1";...

PT-2025-34742 · Unknown · Mihomo Party

Name of the Vulnerable Software and Affected Versions: Mihomo Party versions through 1.8.1 Description: A vulnerability exists in Mihomo Party up to version 1.8.1 on macOS. The issue is related to the enableSysProxy function within the src/main/sys/sysproxy.ts file of the Socket Handler component...

Solaris 10 (sparc): 153093-01

SunOS 5.10: SunOS 5.10: mkdir patch. Date this patch was last updated by Sun : Apr/14/25 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255263; scriptversion"1.1";...

Solaris 10 (i386): 146574-03

SunOS 5.10: SunOS 5.10x86: syslogd patch. Date this patch was last updated by Sun : Jul/14/25 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255251; scriptversion"1.1";...

CVE-2025-6188

CVE-2025-6188 affects Arista EOS: specially crafted UDP packets with source port 3503 may be accepted, potentially causing unexpected behavior in UDP services without authentication. Affected EOS releases include 4.30.x, 4.31.x, 4.32.x, 4.33.x, and 4.34.x train lines (exact sub-releases listed in...

CVE-2025-6188 On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do n

On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do not perform some form of authentication...

CVE-2025-3456 On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-c

On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-config could then be used to obtain protoc...

CVE-2025-29525

DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel...

Vulnerability fixed in Apple macOS, iOS and iPadOS

Apple has fixed a vulnerability in several Apple operating systems. The vulnerability is in how the systems handle processing malicious image files, which can lead to memory corruption. This problem has been addressed by improved memory limit controls. Apple says it has information that this...

Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing

The advanced persistent threat APT actor known as Transparent Tribe has been observed targeting both Windows and BOSS Bharat Operating System Solutions Linux systems with malicious Desktop shortcut files in attacks targeting Indian Government entities. "Initial access is achieved through...

PT-2025-34717 · Ruijie · Ruijie Ws7204-A

Name of the Vulnerable Software and Affected Versions: Ruijie WS7204-A version 2017.06.15 Description: A vulnerability exists in Ruijie WS7204-A 2017.06.15 related to os command injection. The issue is located in the file /itbox pi/branch import.php?a=branch list, where manipulation of the provin...

CVE-2025-29525

The CVE-2025-29525 entry concerns the DASAN GPON ONU H660WM family (H660WMR210825, hardware DS-E5-583-A1) with insecure default credentials in the modem’s control panel. The root issue is default credentials that can be exploited for unauthorized access over the network (supported by CVSS vector:...

TOTOLINK A3002R macstr, bandstr and clientoff parameter command injection vulnerability

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from an OS command injection vulnerability that stems from the presence of...

Linux Distros Unpatched Vulnerability : CVE-2017-7153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTun...

Linux Distros Unpatched Vulnerability : CVE-2017-7048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected...