CVE-2025-42894 Path Traversal vulnerability in SAP Business Connector

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

CVE-2025-42892 OS Command Injection vulnerability in SAP Business Connector

Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating...

Microsoft Windows Ancillary Function Driver for WinSock: Race Condition Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock. An attacker could exploit the vulnerability to elevate...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from insufficient input validation, which could lead to process crashes and affect availability...

Photon OS 4.0: Rubygem PHSA-2025-4.0-0903

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0903. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Microsoft Windows Access Control Error Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

SAP Business Connector path traversal vulnerability

SAP Business Connector is a middleware from SAP, Germany. SAP Business Connector suffers from a path traversal vulnerability that can be exploited by an attacker to traverse directories on the system to read, write, overwrite, and delete arbitrary files on the host system...

SAP Business Connector: Operating System Command Injection Vulnerability

SAP Business Connector is a middleware from SAP, Germany. SAP Business Connector suffers from an operating system command injection vulnerability that stems from OS command injection and could lead to the execution of arbitrary operating system commands...

Security Advisory 0125

Security Advisory 0125 . CSAF PDF Date: November 11, 2025 Revision | Date | Changes ---|---|--- 1.0 | November 11, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-8870 CVSS:3.1 Base Score 4.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVSS:4.0 Base Score 5.6...

Microsoft Windows Resource Management Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Contacts Component iOS iPadOS Unauthorized Access

The vulnerability of the Contacts component in iOS and iPadOS operating systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Safari WebKit Unauthenticated Access Disclosure

The vulnerability of the Web page rendering module in Safari web browsers, operating systems iOS, and iPadOS relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Assets Component Sandbox Bypass

The vulnerability of the Assets component in iOS, iPadOS, macOS, tvOS, and visionOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass the sandbox protection mechanisms...

Apple Account Unauthorized Access

The vulnerability of the Apple Account component in operating systems such as iOS, iPadOS, watchOS, and visionOS is related to insufficient protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Stolen Device Protection iOS iPadOS Disable

The vulnerability of the Stolen Device Protection function in iOS and iPadOS operating systems is related to insufficient protection for service data. Exploiting this vulnerability could allow a hacker to disable the Stolen Device Protection function...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS suffers from a security vulnerability that stems from an escalation of privilege issue that could result in a VAPIX Administrator privileged user gaining Linux Root privileges...

Important Photon OS Security Update - PHSA-2025-4.0-0904

Updates of 'unbound' packages of Photon OS have been released...

Zephyr security vulnerabilities

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from a contention condition in the entry point of a system call, which could lead to elevation of privilege by a malicious userspace process...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from insufficient validation of ACAP configuration file inputs, which could lead to path traversal attacks and elevation of privilege...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that originates from a malicious ACAP application that can obtain administrator-level service account credentials used by a legitimate ACAP application, potentially resulting in elevated privileges f...