OPENSUSE-SU-2025:15690-1 java-11-openj9-11.0.29.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.29.0-1.1 package on the GA media of openSUSE Tumbleweed...

F5 Networks F5OS-A/F5OS-C DoS (K000149820)

The version of F5 Networks F5OS-A or F5OS-C installed on the remote host is affected by a vulnerability as referenced in the K000149820 advisory. - When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization. Note:...

Century Systems FutureNet MA-X series 操作系统命令注入漏洞

Century Systems FutureNet MA-X series is a series of industrial communication module devices from Century Systems, Japan. An operating system command injection vulnerability exists in the Century Systems FutureNet MA-X series, which stems from an OS command injection vulnerability in the Web UI...

ELog 安全漏洞

ELog is an electronic logging software with a web interface by the individual developer Stefan Ritt. ELog suffers from a security vulnerability that stems from the ability of an authenticated user to modify or overwrite configuration files, potentially leading to a denial of service. If execution...

DELL SupportAssist OS Recovery Information Disclosure Vulnerability

DELL SupportAssist OS Recovery is a standalone recovery tool pre-installed by Dell on some Windows 10/11 computers to diagnose hardware problems, repair the system, backup files or restore factory settings. DELL SupportAssist OS Recovery suffers from an information disclosure vulnerability that...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0664

Updates of 'strongswan', 'ImageMagick', 'linux-rt', 'linux', 'linux-esx' packages of Photon OS have been released...

CVE-2025-34284

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-34286

Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager CCM Run Check command. Insufficient validation/escaping of parameters used to build backend command lines allows an authenticated administrator to inject shell metacharacters that are...

CVE-2025-34284 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-43942

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

CVE-2025-43942

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

CVE-2025-46422

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2025-43941

Dell Unity, versions 5.5 and Prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary command with root privileges. This...

CVE-2025-43939

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

CVE-2025-46423

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2025-46423

CVE-2025-46423: Dell Unity OS (version 5.5 and earlier) contains an OS Command Injection due to improper neutralization of special elements in commands. A low-privileged attacker with local access could potentially execute arbitrary commands with root privileges. Affected product/versions: Dell U...

CVE-2025-43939

CVE-2025-43939 affects Dell Unity (versions 5.4 and prior). The issue is an OS Command Injection due to improper neutralization of special elements in command handling, enabling a local, low-privileged attacker to execute commands and achieve privilege elevation. Remediation per connected sources...

CVE-2025-43941

Dell Unity, versions 5.5 and Prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary command with root privileges. This...

[SECURITY] Fedora 42 Update: mingw-qt6-qtsensors-6.9.3-1.fc42

This package contains the Qt software toolkit for developing cross-platform applications. This is the Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

PT-2025-44403

Name of the Vulnerable Software and Affected Versions Dell Unity versions 5.4 and prior Description Dell Unity versions 5.4 and prior contain an Improper Neutralization of Special Elements used in an OS Command vulnerability, also known as an OS Command Injection issue. A low privileged attacker...