GitLab 17.4 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-10868)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Business Logic Errors in GitLab CVE-2025-10868 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

The vulnerability of Cisco IOS XE network device Catalyst 9000, related to code errors, allows a hacker to trigger a service failure.

The vulnerability of Cisco IOS XE Catalyst 9000 network devices is related to code errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PyTorch 安全漏洞

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from the bitwiserightshift function mishandling the boundary value of the OTHER parameter, which can be exploited by an attacker to cause an output error...

Cisco IOS XE 安全漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from mishandling of errors...

The vulnerability of the PERCo-Web access control system, related to errors in information representation by the user interface, allows a perpetrator to carry out a clickjacking attack.

The vulnerability of the PERCo-Web access control system is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a malicious actor to carry out a clickjacking attack remotely...

The vulnerability of the information and event exchange software between the components of the IBM Security Verify Information Queue system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the information and event exchange software between the components of the IBM Security Verify Information Queue authentication and authorization system is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to enhance their...

The vulnerability of the Android operating system, related to errors in information processing, allows a perpetrator to disclose protected information.

The vulnerability of the Android operating system is related to errors in information processing. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

The vulnerability of the Tenable Network Monitor security control software, related to access control errors, allows a perpetrator to increase their privileges.

The vulnerability of the Tenable Network Monitor security control tool is related to access control errors. Exploiting this vulnerability could allow an attacker to increase their privileges...

SUSE SLES12 Security Update : vim (SUSE-SU-2025:03299-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03299-1 advisory. Updated to 9.1.1629: - CVE-2025-53905: Fixed malicious tar archive may causing a path traversal in Vims tar.vim plugin bsc1246604 -...

User Interface (UI) Misrepresentation of Critical Information

Overview Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information via improper handling of error messages passed through URL parameters. An attacker can manipulate browser-displayed error messages by injecting arbitrary content, potentially...

SUSE-SU-2025:03299-1 Security update for vim

This update for vim fixes the following issues: Updated to 9.1.1629: - CVE-2025-53905: Fixed malicious tar archive may causing a path traversal in Vim’s tar.vim plugin bsc1246604 - CVE-2025-53906: Fixed malicious zip archive may causing a path traversal in Vim’s zip bsc1246602 - CVE-2025-55157:...

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, related to errors in processing the relative path to the directory, allows a hacker to execute arbitrary code.

The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of JetBrains TeamCity is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the V8 component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the V8 component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability in the `net/sched/sch_prio.c` component of the Linux operating system allows a malicious actor to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the net/sched/schprio.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, compromise its integrity, and cause...

CVE-2025-55068

Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-service condition...

Linux Distros Unpatched Vulnerability : CVE-2022-50357

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: dwc3: core: fix some leaks in probe The dwc3getproperties function calls: dwc-usbpsy = powersupplygetbynameusbpsyname %NASLMINLEVEL 80900 C Tenable, Inc...

SUSE CVE-2022-50406

In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00000000000000f8 Buffer I/O error on dev...

The vulnerability of the Intel Rapid Storage Technology implementation lies in access segmentation errors, which allow attackers to escalate their privileges.

The vulnerability of the Intel Rapid Storage Technology implementation is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) arises from synchronization errors when using shared resources, allowing attackers to gain increased privileges.

The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly synchronizing the page tables, which could lead to page errors in kernel mode...