KB5066873: Windows Server 2012 R2 Security Update (October 2025)

The remote Windows host is missing security update 5066873. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

Photon OS 5.0: Linux PHSA-2025-5.0-0642

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0642. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the DDSH CLI command-line interface of the data protection software, through backup with PowerProtect Data Domain; the data protection software for corporate environments using cloud technologies, such as APEX Protection Storage; the PowerProtect DD Virtual Edition data protection platform; the PowerProtect Data Domain Management Center, a software tool for centralized management of Data Domain storage systems; and the Data Domain OS operating system, which allows attackers to trigger service interruptions.

The vulnerability of the DDSH CLI command-line interface of the data protection software lies in the fact that it relies on buffer overflow attacks within memory. This vulnerability can be exploited by attackers to cause service failures...

Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in corporate environments using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and Data Domain OS – vulnerabilities related to the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands and enhance their privileges.

The vulnerabilities of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS...

Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in corporate environments using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and Data Domain OS – a system that lacks measures to neutralize special elements, allowing attackers to execute arbitrary commands and increase their privileges.

The vulnerabilities of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS...

Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in corporate environments using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system—all of which rely on cryptographic algorithms with vulnerabilities, allowing attackers to compromise the protected information.

The vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system a...

The vulnerability of the software in the PowerProtect Data Domain Management Center for operating systems Dell EMC Data Domain Operating System (DD OS) arises from the lack of measures to neutralize specific elements. This allows a perpetrator to execute arbitrary code.

The vulnerability of the PowerProtect Data Domain Management Center software, which is used for centralized management of data storage systems, in operating systems like Dell EMC Data Domain Operating System DD OS, stems from the lack of measures taken to neutralize specific elements within the...

Cisco IOS XE Software CLI DoS (cisco-sa-ios-cli-EB7cZ6yO)

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. An attacker with a low-privileged account could exploit this vulnerability by...

Hewlett Packard Enterprise ArubaOS 安全漏洞

Hewlett Packard Enterprise ArubaOS HPE ArubaOS is a networked wireless operating system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ArubaOS HPE ArubaOS that stems from an arbitrary file download vulnerability in the CLI binary, which could le...

PT-2025-41992

Name of the Vulnerable Software and Affected Versions AOS-8 Instant affected versions not specified AOS 10 affected versions not specified Description A flaw exists in how ethernet frames are processed, potentially allowing a remote attacker to cause a denial of service. Successful exploitation m...

PT-2025-41973

Name of the Vulnerable Software and Affected Versions Windows Agere Modem Driver ltmdm64.sys versions prior to the October 2025 cumulative update Description The Agere Modem Driver, a component used for dial-up or fax connections in Windows, contains a flaw related to the handling of untrusted...

PT-2025-41985

Name of the Vulnerable Software and Affected Versions AOS-10 GW affected versions not specified AOS-8 Controller/Mobility Conductor affected versions not specified Description An issue exists that allows an authenticated malicious actor to download arbitrary files through carefully constructed...

PT-2025-42026

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description The Windows USB Video Driver exhibits a flaw where the generation of error messages can expose sensitive information locally to an authorized attacker. The issue allows for t...

Important Photon OS Security Update - PHSA-2025-5.0-91-0643

Updates of 'linux', 'linux-esx', 'perl' packages of Photon OS have been released...

HPESBNW04958 rev.1 - HPE Aruba Networking AOS-8 Instant AP and AOS-10 AP, Multiple Vulnerabilities

Potential Security Impact: Local: Bypass Security Restrictions, Denial of Service DoS; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 300 Series Access Points see Affected Products Aruba 303 Series Access Points see Affected Products Aruba 3...

PT-2025-41927

Name of the Vulnerable Software and Affected Versions Ivanti EPMM versions prior to 12.6.0.2 Ivanti EPMM versions prior to 12.5.0.4 Ivanti EPMM versions prior to 12.4.0.4 Description A flaw exists in the admin panel of Ivanti EPMM that allows a remote authenticated attacker with admin privileges ...

CVE-2025-0636

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution...

CVE-2025-0636 Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution...

AndSoft e-TMS OS Command Injection Vulnerability (CNVD-2025-23557)

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from improper manipulation of parameter m. An attacker can exploit this vulnerability by sending a POST request to execute an operati...

PT-2025-42174

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson Linux and IGX OS affected versions not specified Description The software contains a flaw in NvMap related to memory allocation tracking. This could allow a local attacker to cause memory overallocation, potentially leading to a...