Important Photon OS Security Update - PHSA-2026-5.0-90-0741

Updates of 'linux-esx' packages of Photon OS have been released...

MiracleLinux 7 : PackageKit-1.1.5-2.0.1.el7.AXS7 (AXSA:2018-3051:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3051:01 advisory. PackageKit: authentication bypass allows to install signed packages without administrator privileges CVE-2018-1106 Tenable has extracted the preceding...

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.36-1.13.8.1.AXS4 (AXSA:2015-409:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-409:03 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2015-2590 CVE-2015-2601 CVE-2015-2621 CVE-2015-2625 CVE-2015-2628...

MiracleLinux 4 : net-snmp-5.5-54.AXS4.1 (AXSA:2015-441:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-441:02 advisory. SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an...

@deno/sandbox (>=0.0.9, <=0.6.0), @ekairos/dataset (>=1.21.56-beta.0, <=1.22.22-beta.development.0) +34 more potentially affected by CVE-2026-22774 via devalue (>=5.3.2, <=5.6.0)

devalue NPM version =5.3.2, =0.0.9, =1.21.56-beta.0, =1.22.4-beta.development.0, =1.21.56-beta.0, =1.21.67-beta.0, =1.21.88-beta.0, =0.0.0-dev-20260121145510, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.3.4, =0.32.9 and more...

RHSA-2026:0315 Red Hat Security Advisory: OpenShift Container Platform 4.12.84 packages and security update

Bulletin has no description...

CVE-2025-12050

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

GHSA-WHQX-F9J3-CH6M vulnerabilities

Vulnerabilities for packages: witness, ratify-fips, kyverno-notation-aws, policy-controller, kyverno, kyverno-notation-aws-fips, falcoctl, goreleaser, tkn-fips, zot, cloudbeat-fips, kyverno-fips, tekton-chains-fips, tkn, aactl, cloudbeat, chainctl, image-factory-fips, gitsign,...

Ubuntu: Security Advisory (USN-7956-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2025-68790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCAPORTS component Clear hcadevcomcomp in device's privat...

GHSA-37V4-CWGP-X353 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-12052

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-12051

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-12053

CVE-2025-12053 describes a buffer overflow in drivers within tool packages caused by using RTL_QUERY_REGISTRY_DIRECT to read a registry value. An untrusted user-mode application could trigger overflow, with local access required (CTL: LOW privileges) and no user interaction. Public references (NV...

GHSA-4P23-QFC5-2VC9 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-qemu, linux-gcp...

CVE-2025-37880 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-qemu, linux-gcp...

Linux Distros Unpatched Vulnerability : CVE-2026-0906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HT...

PT-2026-2440

Name of the Vulnerable Software and Affected Versions Windows Kernel Driver affected versions not specified Description The drivers within the tool packages utilize the RTL QUERY REGISTRY DIRECT flag when reading a registry value. This process is susceptible to a buffer overflow if an untrusted...

Critical Photon OS Security Update - PHSA-2026-5.0-0738

Updates of 'gpsd' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-0901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML pag...