CVE-2021-2388 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-37WC-J2J9-6VMF vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2025-42946

Due to directory traversal vulnerability in SAP S/4HANA Bank Communication Management, an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacke...

The vulnerability of the tcp_bound_to_half_wnd() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tcpboundtohalfwnd function in the Linux operating system is related to incorrect type conversion of numerical values. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Apple Security Update: iOS 18.6.1

Apple recommends to install security update iOS 18.6.1 on devices iPhone XS and later...

F5 Networks BIG-IP : BIG-IP APM VPN browser client for macOS vulnerability (K000151782)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000151782 advisory. A missing file integrity check vulnerability exists on the macOS F5 VPN browser client...

Photon OS 4.0: Jq PHSA-2025-4.0-0841

An update of the jq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0841. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid249335...

BOSCH ctrlX OS 安全漏洞

BOSCH ctrlX OS is a Linux-based real-time operating system from the German company BOSCH. A security vulnerability exists in BOSCH ctrlX OS that stems from improper access control of Task API endpoints, which could lead to internal application data disclosure...

Cisco多款产品 安全漏洞

Cisco IOS and others are products of Cisco Corporation USA.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE is an operating system.Cisco Secure Firewall Adaptive Security Appliance is an enterprise-class firewall software. A security vulnerability exists in...

Apple Security Update: watchOS 11.6.1

Apple recommends to install security update watchOS 11.6.1 on devices Apple Watch Series 6 and later...

KuWFi GC111 安全漏洞

KuWFi GC111 is a WiFi router from KuWFi China. A security vulnerability exists in the KuWFi GC111 that stems from improper handling of unauthenticated requests and could lead to the execution of arbitrary OS commands...

CVE-2025-34154 UnForm Server Manager < 10.1.12 Unauthenticated Arbitrary File Read

UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient input validation and lack of path...

GHSA-P3QF-84RG-JXFC OliveTin OS Command Injection vulnerability

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...

OliveTin OS Command Injection vulnerability

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...

CVE-2025-50946

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...

CVE-2025-48500 BIG-IP APM VPN web client for macOS vulnerability

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

CVE-2025-54074 Cherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth...

CVE-2025-54074

CVE-2025-54074 affects Cherry Studio desktop client, versions 1.2.5–1.5.1, which are vulnerable to OS command injection when connecting to a malicious MCP server over HTTP Streamable mode. The underlying issue arises during the OAuth-enabled connection process, allowing an attacker-controlled MCP...

GHSA-PWQ7-2GVJ-VG9V vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, tensorflow-gpu-jupyter...

K000151782: BIG-IP APM VPN browser client for macOS vulnerability CVE-2025-48500

Security Advisory Description A missing file integrity check vulnerability exists on the macOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. CVE-2025-48500 Impact A local,...