PT-2025-39296

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A flaw exists in the implementation of the TACACS+ protocol that may allow a remote attacker to view sensitive data or bypass authentication. The issue...

CVE-2025-9588

CVE-2025-9588 describes an OS command injection in Iron Mountain Archiving Services Inc. EnVision prior to 250563, caused by improper neutralization of special elements in input that could lead to command execution. The vulnerability impacts EnVision versions before 250563 and is rated CRITICAL (...

Number withdrawal

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States...

Iron Mountain Envision operating system command injection vulnerability

Iron Mountain enVision is a document archiving and management software from Iron Mountain, Inc. An operating system command injection vulnerability exists in versions prior to Iron Mountain enVision 250563, which stems from improper neutralization of a special element that could lead to OS comman...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0626

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

PHP proc_open Command Execution

The vulnerability of the procopen function in the PHP programming language exists because measures to neutralize the special elements used in operating system commands have not been implemented. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

WebUI Component Full Control

The vulnerability of the WebUI component of the software-hardware complex for diagnosing and monitoring railway infrastructure, the Frauscher FDS102, is related to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability can...

Photon OS 4.0: Sqlite PHSA-2025-4.0-0873

An update of the sqlite package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0873. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-34192 Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 macOS/Linux client deployments are built against OpenSSL 1.0.2h-fips released May 2016, which has been end-of-life since 2019 and is no longer supported by the OpenSSL...

CVE-2025-10589

The N-Reporter, N-Cloud, and N-Probe developed by N-Partner has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

Ashlar-Vellum Cobalt Type Obfuscation Vulnerability (CNVD-2025-23022)

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. A type confusion vulnerability exists in Ashlar-Vellum Cobalt,...

Important Photon OS Security Update - PHSA-2025-5.0-0624

Updates of 'sqlite' packages of Photon OS have been released...

Support Statement - Veeam Software Appliance Customizations

Support Statement Installing additional Linux packages, third-party applications, or changing OS settings other than those that can be controlled via the Veeam Host Management Console on the Veeam Appliances is not supported. Veeam Customer Support cannot provide technical support for appliances...

Photon OS 4.0: Ncurses PHSA-2025-4.0-0871

An update of the ncurses package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0871. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Ashlar-Vellum Cobalt Out-of-Bounds Write Vulnerability

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds write...

TCP/IP Connectivity Utilities Privilege Escalation

The vulnerability of the TCP/IP Connectivity Utilities component in IBM i operating systems is related to access control errors. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

CVE-2025-37125

A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS ECOS. Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly...

CVE-2025-37129

A vulnerable feature in the command line interface of EdgeConnect SD-WAN could allow an authenticated attacker to exploit built-in script execution capabilities. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system if the feature is...

CVE-2025-47906 Unexpected paths returned from LookPath in os/exec

If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

CVE-2023-53445

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix a refcount bug in qrtrrecvmsg Syzbot reported a bug as following: refcountt: addition on 0; use-after-free. ... RIP: 0010:refcountwarnsaturate+0x17c/0x1f0 lib/refcount.c:25 ... Call Trace: refcountadd...