21166 matches found
ALSA-2025:17428 Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools: Local privilege escalation in open-vm-tools...
Unity Linux 20.1070e Security Update: uboot-tools (UTSA-2025-664209)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-664209 advisory. Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdifft is...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: squashfs-tools (UTSA-2025-680654)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680654 advisory. squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been...
open-vm-tools security update
12.3.5-2.0.1.el8.1 - Fix spaces in vmware udev rule for scsi devices Orabug: 24461968 - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. Orabug: 22815019 - Increase timeout for scsi devices on VMWare guests by adding a udev rule. Orabug: 21819156 12.3.5-2.el8.1 -...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: squashfs-tools (UTSA-2025-680652)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680652 advisory. squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: multipath-tools (UTSA-2025-680596)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680596 advisory. multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to acces...
ALSA-2025:17509 Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools: Local privilege escalation in open-vm-tools...
RHEL 8 : open-vm-tools (RHSA-2025:17509)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:17509 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...
RHEL 9 : open-vm-tools (RHSA-2025:17428)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:17428 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...
RHEL 10 : open-vm-tools (RHSA-2025:17429)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:17429 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...
Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools: Local privilege escalation in open-vm-tools...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: multipath-tools (UTSA-2025-680597)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680597 advisory. multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able...
New Report Links Research Firms BIETA and CIII to China's MSS Cyber Operations
A Chinese company named the Beijing Institute of Electronics Technology and Application BIETA has been assessed to be likely led by the Ministry of State Security MSS. The assessment comes from evidence that at least four BIETA personnel have clear or possible links to MSS officers and their...
ROS-20251006-03
A vulnerability in a set of tools that allow companies to manage software subscriptions Candlepin is related to the ability to create data related to another client/tenant. Exploitation vulnerability could allow an attacker acting remotely to gain access to sensitive information...
Forensic Timeliner 2.2
Forensic Timeliner is a high-speed forensic processing engine built for DFIR investigators. It quickly consolidates CSV output from top-tier triage tools into a unified mini timeline with built-in filtering, artifact detection, date filtering, keyword tagging, and deduplication...
EUVD-2022-2576
Malicious code in bioql PyPI...
EUVD-2022-2775
Malicious code in bioql PyPI...
EUVD-2025-2855
Malicious code in bioql PyPI...