CVE-2025-48860

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated low privileged attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup archive, the attacker may have been able to acce...

CVE-2025-48862

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file itself remains unencrypted...

CVE-2025-48862

The CVE affects ctrlX OS (Bosch) where ambiguous wording in the web interface of the setup/backup mechanism could mislead users into thinking the backup is encrypted when a password is set. In reality, only the private key in the backup (if present) is encrypted; the backup file itself remains un...

CVE-2025-48861

CVE-2025-48861 describes a vulnerability in the Task API endpoint of the ctrlX OS setup mechanism, where an unauthenticated, remote attacker could access and exfiltrate internal application data (e.g., debug logs and the version of installed apps). Public sources consistently tie the issue to ina...

CVE-2025-48860

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated low privileged attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup archive, the attacker may have been able to acce...

CVE-2025-48860

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated low privileged attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup archive, the attacker may have been able to acce...

CVE-2025-48860

CVE-2025-48860 affects the web application of the ctrlX OS setup mechanism. An authenticated, low-privilege attacker could remotely access backup archives created by a user with elevated permissions, potentially exposing sensitive data depending on archive contents. The advisory sources describe ...

GHSA-37WC-J2J9-6VMF vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2021-2388 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2025-42946

Due to directory traversal vulnerability in SAP S/4HANA Bank Communication Management, an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacke...

Photon OS 4.0: Jq PHSA-2025-4.0-0841

An update of the jq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0841. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid249335...

Junos OS Web Management Maintenance Failure

The vulnerability of the web management component of the Junos OS router series, including SRX Series, EX Series, MX240, MX480, MX960, and QFX5120 Series, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to trigger service failures...

KuWFi GC111 security vulnerability

KuWFi GC111 is a WiFi router from KuWFi China. A security vulnerability exists in the KuWFi GC111 that stems from improper handling of unauthenticated requests and could lead to the execution of arbitrary OS commands...

Cisco’s various products have security vulnerabilities

Cisco IOS and others are products of Cisco Corporation USA.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE is an operating system.Cisco Secure Firewall Adaptive Security Appliance is an enterprise-class firewall software. A security vulnerability exists in...

BOSCH ctrlX OS security vulnerabilities

BOSCH ctrlX OS is a Linux-based real-time operating system from the German company BOSCH. A security vulnerability exists in BOSCH ctrlX OS that stems from improper access control of Task API endpoints, which could lead to internal application data disclosure...

Apple Security Update: iOS 18.6.1

Apple recommends to install security update iOS 18.6.1 on devices iPhone XS and later...

Apple Security Update: watchOS 11.6.1

Apple recommends to install security update watchOS 11.6.1 on devices Apple Watch Series 6 and later...

Linux tcp_bound_to_half_wnd() DoS

The vulnerability of the tcpboundtohalfwnd function in the Linux operating system is related to incorrect type conversion of numerical values. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

F5 Networks BIG-IP : BIG-IP APM VPN browser client for macOS vulnerability (K000151782)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000151782 advisory. A missing file integrity check vulnerability exists on the macOS F5 VPN browser client...

CVE-2025-34154 UnForm Server Manager < 10.1.12 Unauthenticated Arbitrary File Read

UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient input validation and lack of path...