GHSA-3QF2-7XVH-J2FX vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-17-openj9...

CVE-2018-2629 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-17-openj9...

GHSA-M2WJ-546G-X92M vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-17-openj9...

GHSA-MFRM-W63C-3X58 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-17-openj9...

GHSA-P43G-84W6-PQ26 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-17-openj9...

Exploit for Use After Free in Apple Ipados

Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE...

Photon OS 4.0: Git PHSA-2025-4.0-0855

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid25367...

Photon OS 4.0: Ctags PHSA-2025-4.0-0859

An update of the ctags package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0859. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-9181 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-4C9V-RQPW-WRJ7 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-6183

The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message...

PT-2025-34489 · Voltronic Power +1 · Viewpower +1

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower versions 1.04-21353 and earlier PowerShield Netguard versions prior to 1.04-23292 Description: A remote attacker can configure the system via a web interface without authentication. This includes changing the web...

Photon OS 5.0: Linux PHSA-2025-5.0-0598

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0598. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Roo Code 操作系统命令注入漏洞

Roo Code is an AI-based autonomous coding agent from Roo Code. An operating system command injection vulnerability exists in Roo Code versions prior to 3.25.5, which stems from a flaw in the command parsing logic that could lead to the execution of arbitrary code...

IntelliJ IDEA < 2025.2 Multiple Vulnerabilities (macOS)

The version of IntelliJ IDEA installed on the remote host is prior to 2025.2. It is, therefore, affected by a multiple vulnerabilities as referenced in the advisory. - In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference. CVE-2025-57727 - In JetBrains...

Photon OS 5.0: Postgresql13 PHSA-2025-5.0-0597

An update of the postgresql13 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0597. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Moderate Photon OS Security Update - PHSA-2025-4.0-0859

Updates of 'ctags' packages of Photon OS have been released...

CVE-2025-55031

Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed...

CVE-2009-20003

Xenorate

CVE-2025-3128

A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamper with, destroy or delete information in Mitsubishi Electric smartRTU, or cause a denial-of service condition on the product...