AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from improper ACAP configuration file permissions, which could lead to command injection and elevation of privilege...

Mozilla Firefox ESR < 140.5

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-88 advisory. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox 145 and Firefox...

PT-2025-46232

Name of the Vulnerable Software and Affected Versions SAP Business Connector affected versions not specified Description An OS Command Injection issue exists in SAP Business Connector. An authenticated attacker with administrative access and adjacent network access can upload specially crafted...

Photon OS 4.0: Glib PHSA-2025-4.0-0902

An update of the glib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0902. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-12438

Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: Medium...

Important Photon OS Security Update - PHSA-2025-5.0-91-0673

Updates of 'libxml2', 'linux', 'linux-esx', 'polkit' packages of Photon OS have been released...

Apple iOS and iPadOS Logic Issues Insufficient Checks Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a logical issue with an insufficiently checked vulnerability that can be exploited by an attacker to view sensitive user information...

Important Photon OS Security Update - PHSA-2025-5.0-0673

Updates of 'libxml2', 'linux-esx', 'linux', 'polkit' packages of Photon OS have been released...

Photon OS 4.0: Linux PHSA-2025-4.0-0899

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0899. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Ruby PHSA-2025-5.0-0672

An update of the ruby package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0672. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-5.0-91-0672

Updates of 'git-lfs', 'libarchive', 'unbound', 'glib', 'vim', 'ruby' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-0672

Updates of 'unbound', 'git-lfs', 'vim', 'ruby', 'libarchive', 'glib' packages of Photon OS have been released...

Photon OS 5.0: Binutils PHSA-2025-5.0-0670

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0670. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-5.0-91-0670

Updates of 'linux', 'linux-esx', 'binutils' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-4.0-0902

Updates of 'mc', 'glib' packages of Photon OS have been released...

CVE-2025-6075

A vulnerability in Python’s os.path.expandvars function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denia...

foreman: OS command injection via ct_location and fcct_location parameters

A flaw was found in Red Hat Satellite Foreman component. This vulnerability allows an authenticated user with editsettings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting...

Moderate Photon OS Security Update - PHSA-2025-4.0-0901

Updates of 'binutils' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-4.0-0900

Updates of 'ctags' packages of Photon OS have been released...

Evernote MCP Server 操作系统命令注入漏洞

Evernote MCP Server is a Large Model Context Protocol server for brentmid individual developers. Evernote MCP Server suffers from an operating system command injection vulnerability that stems from the openBrowser function not properly validating a user-supplied string, which could lead to...