GHSA-P43G-84W6-PQ26 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9...

Exploit for Use After Free in Apple Ipados

Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE...

Photon OS 4.0: Git PHSA-2025-4.0-0855

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid25367...

Photon OS 4.0: Ctags PHSA-2025-4.0-0859

An update of the ctags package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0859. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-9181 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-4C9V-RQPW-WRJ7 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-6183

The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message...

Photon OS 5.0: Linux PHSA-2025-5.0-0598

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0598. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-34489 · Voltronic Power +1 · Viewpower +1

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower versions 1.04-21353 and earlier PowerShield Netguard versions prior to 1.04-23292 Description: A remote attacker can configure the system via a web interface without authentication. This includes changing the web...

The vulnerability of the ImageIO image processing framework in operating systems such as iOS, iPadOS, and macOS allows a hacker to execute arbitrary code.

The vulnerability of the ImageIO image processing framework in iOS, iPadOS, and macOS lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code during the processing of image files...

Roo Code 操作系统命令注入漏洞

Roo Code is an AI-based autonomous coding agent from Roo Code. An operating system command injection vulnerability exists in Roo Code versions prior to 3.25.5, which stems from a flaw in the command parsing logic that could lead to the execution of arbitrary code...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) component in operating systems allows attackers to disclose sensitive information that is protected by this service.

The vulnerability of the Windows Routing and Remote Access Service RRAS component in operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability in the implementation of the Windows SMB network protocol allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows SMB network protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

IntelliJ IDEA < 2025.2 Multiple Vulnerabilities (macOS)

The version of IntelliJ IDEA installed on the remote host is prior to 2025.2. It is, therefore, affected by a multiple vulnerabilities as referenced in the advisory. - In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference. CVE-2025-57727 - In JetBrains...

The vulnerability of the Windows Distributed Transaction Coordinator (MSDTC) service on Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Windows Distributed Transaction Coordinator MSDTC in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Photon OS 5.0: Postgresql13 PHSA-2025-5.0-0597

An update of the postgresql13 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0597. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Moderate Photon OS Security Update - PHSA-2025-4.0-0859

Updates of 'ctags' packages of Photon OS have been released...

CVE-2025-55031

Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed...