26523 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-26700
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey...
Vulnerability of operating systems visionOS, macOS, tvOS, iPadOS, iOS, iPadOS, macOS, related to data type mixing errors, allowing attackers to cause file corruption
The vulnerability of operating systems visionOS, macOS, tvOS, iPadOS, iOS, and iPadOS is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to cause file corruption...
The vulnerability of the distribution of the MiniOS operating system for ChromeOS, which allows a hacker to increase their privileges
The vulnerability of the MiniOS operating system for ChromeOS is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...
Linux Distros Unpatched Vulnerability : CVE-2018-2612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior...
Linux Distros Unpatched Vulnerability : CVE-2020-28624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead ...
Photon OS 5.0: Httpd PHSA-2025-5.0-0570
An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0570. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2025-19439)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in Huawei HarmonyOS, which can be exploited by attackers to affect availability...
Critical Photon OS Security Update - PHSA-2025-5.0-0590
Updates of 'git' packages of Photon OS have been released...
TOTOLINK A3002R 安全漏洞
The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from an OS command injection vulnerability, which stems from a command...
Huawei HarmonyOS and EMUI out-of-bounds access vulnerability (CNVD-2025-22606)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. An out-of-bounds access vulnerability exists in Huawei...
Photon OS 4.0: Glibc PHSA-2025-4.0-0838
An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0838. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Iperf PHSA-2025-5.0-0579
An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0579. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Apache PHSA-2025-4.0-0850
An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0850. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2025-7961
Improper Control of Generation of Code 'Code Injection' vulnerability in Wulkano KAP on MacOS allows TCC Bypass.This issue affects KAP: 3.6.0...
CVE-2025-20251
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to create or delete arbitrary files on the underlying operating system. If...
CVE-2025-8943
The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...
CVE-2025-48862
Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file itself remains unencrypted...
CVE-2025-48861
A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...
Claude Code 操作系统命令注入漏洞
Claude Code is an open source proxy coding tool from Anthropic. An operating system command injection vulnerability exists in versions of Claude Code prior to 1.0.4, which stems from an overly broad list of allowed security commands that could lead to unacknowledged file reads and network transfe...
