PT-2025-41172

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.1.0.10 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.25 Dell PowerProtect Data Domain versions 7.10.1.0 through 7.10.1.50 Description The software contains an Improper...

PT-2025-41157

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.3.0.15 Dell PowerProtect Data Domain LTS2025 version 8.3.1.0 Dell PowerProtect Data Domain LTS2024 versions 7.13.1.0 through 7.13.1.30 Dell PowerProtect Data Domain LTS 2023 versions...

Photon OS 5.0: Open PHSA-2025-5.0-0631

An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0631. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin: AIX/VIOS is vulnerable to a memory corruption issue (CVE-2025-6965) due to RPM

Summary Vulnerability in RPM could allow an attacker to cause a memory corruption issue CVE-2025-6965. RPM is used by AIX for package management. Vulnerability Details CVEID:CVE-2025-6965 DESCRIPTION: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate term...

Security Bulletin: IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a stack-based buffer overflow

Summary IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...

EUVD-2025-32563

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

CVE-2025-60957

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

CVE-2025-60959

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-60959

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

CVE-2025-60959

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

The vulnerability of the integrated development environment Xcode for MacOS systems, related to access control errors, allows attackers to bypass the sandbox protection mechanism.

The IDE CoreML component in the Xcode integrated development environment for operating systems on MacOS has a vulnerability related to access control. Exploiting this vulnerability could allow an attacker to bypass the sandbox protection mechanisms...

The vulnerability of the FontParser() function in operating systems such as macOS, visionOS, iOS, and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the FontParser function in operating systems such as macOS, visionOS, iOS, and iPadOS is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the pci_bus_release_domain_nr() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pcibusreleasedomainnr function in the Linux operating system is related to the use of memory after it has been released. Exploiting this vulnerability allows an attacker to cause a service failure...

CVE-2025-60957

The EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically firmware F/W 6010-0071-000 Ver 4.00 , is susceptible to an OS Command Injection vulnerability. This flaw allows an attacker to execute arbitrary code, cause a denial of service, gain escalated privileges, and access sensi...

PT-2025-40925

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that allows attackers to gain sensitive information through OS Command Injection. The...

CVE-2025-60962

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...

CVE-2025-60965

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...

Photon OS 4.0: Linux PHSA-2025-4.0-0881

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0881. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...