Important Photon OS Security Update - PHSA-2025-4.0-0838

Updates of 'glibc' packages of Photon OS have been released...

Weidmueller’s various products have operating system command injection vulnerabilities

The Weidmueller IE-SR-2TX-WL, among others, is an industrial-grade security router from Weidmueller, Germany. An operating system command injection vulnerability exists in several Weidmueller products. The vulnerability stems from improper cleanup of user input in the main web interface, which...

CVE-2025-54072

An input sanitization flaw was found in yt-dlp. This flaw affects users on Windows platforms and may allow remote code execution. Mitigation Users may switch to an alternate operating system to avoid this issue...

USN-7651-3 linux-aws-6.8, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

Linux net/atm/resources.c Function Heap Buffer Overflow DoS

The vulnerability of the atmdevderegister function net/atm/resources.c in Linux operating systems is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure...

Yandex.Telemost Privilege Escalation

The vulnerability of the "Yandex.Telemost" video conference software lies in the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to the device’s hardware resources...

ELECOM WRC-BE36QS-B and ELECOM WRC-W701-B have operating system command injection vulnerabilities

The ELECOM WRC-BE36QS-B and ELECOM WRC-W701-B are both wireless routers from ELECOM Japan. The ELECOM WRC-BE36QS-B and ELECOM WRC-W701-B suffer from an operating system command injection vulnerability that originates from OS command injection in the WebGUI, which could lead to the execution of...

PT-2025-50090

Name of the Vulnerable Software and Affected Versions Yandex Telemost versions prior to 2.19.1 Description An uncontrolled search path element issue exists in Yandex Telemost on MacOS, enabling search order hijacking. This allows an attacker to potentially manipulate the system's search path to...

CVE-2025-36107

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data...

CVE-2025-41673

A high privileged remote attacker can execute arbitrary system commands via POST requests in the sendsms action due to improper neutralization of special elements used in an OS command...

CVE-2025-24938

The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high privileged access administrator to the application has the potential execute commands on the operating system under the context of the webserver. The vulnerable...

CVE-2025-24936

The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. An attacker with low privileged access to th...

CVE-2025-24936

A command injection vulnerability exists in Nokia WaveSuite NOC (a unified operations and maintenance platform for optical networks) and potentially Apache Web Server (affected versions not specified). The flaw occurs because the web application allows unfiltered user input to be passed to comman...

CVE-2025-24936 Insufficient Validation of Input in the URL

The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. An attacker with low privileged access to th...

Demon Routing Protocol Daemon RCE

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to incorrect buffer size calculations when processing incoming packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptio...

Juniper Networks Junos OS DoS

The vulnerability of Juniper Networks’ Junos OS lies in its insufficient handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Demon Routing Protocol Daemon RCE

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to discrepancies in functionality according to the specifications. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Demon Routing Protocol Daemon Juniper Networks Junos OS Data Compromise

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the lack of memory release after the effective lifespan of the protocol. Exploiting this vulnerability can allow an attacker to compromise the availability...

Demon Routing Protocol Daemon RCE

The vulnerability of the Daemon Routing Protocol rpd in Junos OS and Junos OS Evolved systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Demon Routing Protocol Daemon RCE

The vulnerability of the Daemon Routing Protocol rpd in Junos OS and Junos OS Evolved operating systems is related to improper handling of parameter length discrepancies. Exploiting this vulnerability can allow a malicious actor to cause service failures...