Photon OS 5.0: Grpc PHSA-2025-5.0-0456

An update of the grpc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0456. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important: Red Hat Bug Fix Advisory: LVMS 4.15.10 Bug Fix Update

Updated container images that fix multiple bugs are now available for LVMS 4.15 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...

CVE-2024-57328

creationtimestamp| type| source ---|---|--- 2025-01-23 21:45:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113879859188536569 2025-01-23 22:03:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2844 2025-01-23 22:16:04+00:00| seen|...

CVE-2025-0693

creationtimestamp| type| source ---|---|--- 2025-01-23 21:27:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113879787711896884 2025-01-23 22:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvup7obk2h 2025-01-23 23:55:33+00:00| seen|...

Updated golang packages fix security vulnerabilities

net/http: sensitive headers incorrectly sent after cross-domain redirect, CVE-2024-45336. crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints, CVE-2024-45341...

MGASA-2025-0021 Updated golang packages fix security vulnerabilities

net/http: sensitive headers incorrectly sent after cross-domain redirect, CVE-2024-45336. crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints, CVE-2024-45341...

CVE-2024-55930 Weak default folder permissions

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

An exhaustive evaluation of three firewall models from Palo Alto Networks has uncovered a host of known security flaws impacting the devices' firmware as well as misconfigured security features. "These weren't obscure, corner-case vulnerabilities," security vendor Eclypsium said in a report share...

RHSA-2025:0640 Red Hat Security Advisory: redis:6 security update

Bulletin has no description...

Oracle Critical Patch Update, January 2025 Security Update Review

Oracle released its first quarterly edition of this year’s Critical Patch Update, which received patches for 318 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, includin...

CVE-2025-24030 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

CGA-8R26-H37R-9VW2

Bulletin has no description...

CVE-2024-56914

creationtimestamp| type| source ---|---|--- 2025-01-22 20:01:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2625 2025-01-22 20:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lge6oq65ih2n 2025-01-22 20:35:00+00:00| seen|...

Updated chromium-browser-stable packages fix security vulnerabilities

Lot of CVEs were fixed by upstream since our current version; please see the links...

DoS in Cilium agent DNS proxy from crafted DNS responses

Impact In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an attacker can crash Cilium agents by sending a crafted DNS response to workloads from outside the cluster. For traffic that is allowed but without using DNS-based policy, the dataplane will continue to pass traffic ...

Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products

Oracle is urging customers to apply its January 2025 Critical Patch Update CPU to address 318 new security vulnerabilities spanning its products and services. The most severe of the flaws is a bug in the Oracle Agile Product Lifecycle Management PLM Framework CVE-2025-21556, CVSS score: 9.9 that...

MGASA-2025-0019 Updated rsync packages fix security vulnerabilities

Heap buffer overflow in rsync due to improper checksum length handling. CVE-2024-12084 Info leak via uninitialized stack contents. CVE-2024-12085 Rsync server leaks arbitrary client files. CVE-2024-12086 Path traversal vulnerability in rsync. CVE-2024-12087 Rsync --safe-links option bypass leads ...

CVE-2025-23089

Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...

CVE-2025-23087

CVE-2025-23087 entry is rejected/not used per CVE Program; it does not represent an active vulnerability.

Debian dla-3371 : libunbound-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3371 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3371-1 [email protected]...