26305 matches found
CVE-2025-6541
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...
Photon OS 4.0: Perl PHSA-2025-4.0-0890
An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0890. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Important Photon OS Security Update - PHSA-2025-5.0-0651
Updates of 'binutils' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2025-5.0-91-0651
Updates of 'binutils' packages of Photon OS have been released...
CVE-2025-53057
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracl...
EUVD-2022-54966
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misuse the private context memory. The aead soft crypto occasionally casues the OS panic as setting the 64K page. Here is fix it...
curl: Buffer Overflow in WebSocket Handshake (lib/ws.c:1287)
Summary: Buffer overflow vulnerability in curl's WebSocket implementation due to unsafe use of strcpy in the handshake process. The vulnerability is located at lib/ws.c:1287 where strcpykeyval, randstr is called without proper bounds checking, despite having a bounds check earlier in the code. AI...
CVE-2025-8078
CVE-2025-8078 describes a post-authentication command-injection vulnerability in Zyxel devices: Zyxel ATP series firmware v4.32–v5.40, USG FLEX series v4.50–v5.40, USG FLEX 50(W) series v4.16–v5.40, and USG20(W)-VPN series v4.16–v5.40. An authenticated administrator can pass a crafted string as a...
CVE-2025-6542
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...
CVE-2025-7851
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...
CVE-2025-6542
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...
CVE-2025-7851
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...
CVE-2025-6541
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...
CVE-2025-6541
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...
EUVD-2025-35115
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...
CVE-2025-7850 Authenticated OS command execution
A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways...
CVE-2025-6542 OS command injection in multiple parameters
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...
EUVD-2025-35117
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...