Unity Linux 20.1070e Security Update: xterm (UTSA-2025-680592)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680592 advisory. xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi...

Photon OS 5.0: Open PHSA-2025-5.0-0631

An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0631. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin: AIX/VIOS is vulnerable to a memory corruption issue (CVE-2025-6965) due to RPM

Summary Vulnerability in RPM could allow an attacker to cause a memory corruption issue CVE-2025-6965. RPM is used by AIX for package management. Vulnerability Details CVEID:CVE-2025-6965 DESCRIPTION: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate term...

Security Bulletin: IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a stack-based buffer overflow

Summary IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...

EUVD-2025-32563

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

CVE-2025-60959

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

CVE-2025-60957

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

CVE-2025-60965

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...

CVE-2025-60957

The EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically running F/W 6010-0071-000 Ver 4.00 , is susceptible to an OS Command Injection vulnerability. This flaw allows an attacker to execute arbitrary code, cause a denial of service (DoS), gain escalated privileges, and obtain ...

CVE-2025-60962

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...

CVE-2025-60959

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the pci_bus_release_domain_nr() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pcibusreleasedomainnr function in the Linux operating system is related to the use of memory after it has been released. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the FontParser() function in operating systems such as macOS, visionOS, iOS, and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the FontParser function in operating systems such as macOS, visionOS, iOS, and iPadOS is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

PT-2025-40925

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that allows attackers to gain sensitive information through OS Command Injection. The...

CVE-2025-60959

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the integrated development environment Xcode for MacOS systems, related to access control errors, allows attackers to bypass the sandbox protection mechanism.

The IDE CoreML component in the Xcode integrated development environment for operating systems on MacOS has a vulnerability related to access control. Exploiting this vulnerability could allow an attacker to bypass the sandbox protection mechanisms...

PT-2025-40738

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc5-02182-gf8553a572277 Description The Linux kernel contains a flaw in the powerpc/rtas subsystem. Specifically, it is unsafe to use rtas busy delay to handle a busy status from the ibm,os-term RTAS functi...

Photon OS 4.0: Linux PHSA-2025-4.0-0881

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0881. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...