CVE-2025-6542

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

CVE-2025-7851

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...

CVE-2025-6541

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

Important Photon OS Security Update - PHSA-2025-5.0-0651

Updates of 'binutils' packages of Photon OS have been released...

The vulnerability of the Windows Resilient File System, a local file system for Windows operating systems, allows attackers to increase their privileges.

The vulnerability of the Windows Resilient File System, a local file system of the Windows operating system, is related to the “race condition” issue. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the NDIS Network Driver Interface Specification driver in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Network Driver Interface Specification driver is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the WLAN AutoConfig service in the Windows operating system allows a hacker to exploit it to disclose protected information.

The vulnerability of the WLAN AutoConfig service in the Windows operating system relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Azure cloud platform’s Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Azure cloud platform’s Windows operating system is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows operating system’s COM+ Event System Service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows operating system’s COM+ Event System Service is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Important Photon OS Security Update - PHSA-2025-5.0-91-0651

Updates of 'binutils' packages of Photon OS have been released...

Photon OS 4.0: Perl PHSA-2025-4.0-0890

An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0890. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-53057

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracl...

EUVD-2022-54966

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misuse the private context memory. The aead soft crypto occasionally casues the OS panic as setting the 64K page. Here is fix it...

curl: Buffer Overflow in WebSocket Handshake (lib/ws.c:1287)

Summary: Buffer overflow vulnerability in curl's WebSocket implementation due to unsafe use of strcpy in the handshake process. The vulnerability is located at lib/ws.c:1287 where strcpykeyval, randstr is called without proper bounds checking, despite having a bounds check earlier in the code. AI...

CVE-2025-8078

CVE-2025-8078 describes a post-authentication command-injection vulnerability in Zyxel devices: Zyxel ATP series firmware v4.32–v5.40, USG FLEX series v4.50–v5.40, USG FLEX 50(W) series v4.16–v5.40, and USG20(W)-VPN series v4.16–v5.40. An authenticated administrator can pass a crafted string as a...

CVE-2025-7851

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...

CVE-2025-6542

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

CVE-2025-6542

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

CVE-2025-7851

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...