CVE-2025-31248

Apple macOS is vulnerable to a parsing issue in directory path handling due to insufficient path authentication . This flaw could allow an application to access sensitive user data . The issue is resolved in macOS Sequoia 15.5 , macOS Sonoma 14.7.3 , and macOS Ventura 13.7.3 . No specific exploit...

Apple Safari和Apple macOS 安全漏洞

Apple Safari and Apple macOS are both products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. apple macOS is a specialized operating system developed specifically for Mac computers. A security vulnerability exists in...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple macOS is a specialized operating system developed for Mac computers. apple iPadOS is an operating system for iPad tablet computers. A security vulnerability exists in several Apple products that originates from an out-of-bounds...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from insufficient path authentication, which could result in an application accessing sensitive user data. The followin...

The vulnerability of the SSL VPN service for SonicOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the SSL VPN service for SonicOS operating systems is related to insufficient handling of the format string. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

The vulnerability of the Business Process Intelligence (BPI) module of the Nagios XI IT infrastructure monitoring tool allows a attacker to execute arbitrary commands.

The vulnerability of the Business Process Intelligence BPI module of the Nagios XI IT infrastructure monitoring tool is related to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute...

Google Chrome < 88.0.4324.104 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 88.0.4324.104. It is, therefore, affected by multiple vulnerabilities as referenced in the 202101stable-channel-update-for-desktop19 advisory. - Inappropriate implementation in DevTools in Google Chrome prior to...

TencentOS Server 4: pcs (TSSA-2025:0255)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0255 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: firefox (TSSA-2023:0181)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0181 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Zyxel DX3300-T0 operating system command injection vulnerability

The Zyxel DX3300-T0 is a small wireless WiFi router produced by the Chinese company Zyxel. The Zyxel DX3300-T0 has a vulnerability related to operating system command injection. This vulnerability stems from the privilege parameter allowing for command injection after authentication. Attackers ca...

Google Chrome < 124.0.6367.78 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 124.0.6367.78. It is, therefore, affected by multiple vulnerabilities as referenced in the 202404stable-channel-update-for-desktop24 advisory. - Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a...

CVE-2025-36371

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view...

CVE-2025-37163

A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system...

CVE-2025-37158

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution RCE on the affected system...

CVE-2025-37157

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution RCE on the affected system...

CVE-2025-8404

Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted header and achieve arbitrary code execution of the BMC’s firmware operating system...

Photon OS 5.0: Postgresql14 PHSA-2025-5.0-0683

An update of the postgresql14 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0683. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fortinet FortiWeb Multiple OS Command Injection (FG-IR-25-513)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-513 advisory. - An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in FortiWeb may...

Photon OS 5.0: Linux PHSA-2025-5.0-0682

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0682. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2025-198085

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...