28139 matches found
Security Bulletin: AIX/VIOS is vulnerable to a memory corruption issue (CVE-2025-6965) due to RPM
Summary Vulnerability in RPM could allow an attacker to cause a memory corruption issue CVE-2025-6965. RPM is used by AIX for package management. Vulnerability Details CVEID:CVE-2025-6965 DESCRIPTION: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate term...
Security Bulletin: IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a stack-based buffer overflow
Summary IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...
EUVD-2025-32563
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...
CVE-2025-60957
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...
CVE-2025-60959
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...
CVE-2025-60957
The EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically firmware F/W 6010-0071-000 Ver 4.00 , is susceptible to an OS Command Injection vulnerability. This flaw allows an attacker to execute arbitrary code, cause a denial of service, gain escalated privileges, and access sensi...
CVE-2025-60965
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...
PT-2025-40925
Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that allows attackers to gain sensitive information through OS Command Injection. The...
CVE-2025-60959
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...
CVE-2025-60959
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...
CVE-2025-60962
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...
Linux Heap Buffer Overflow DoS
The vulnerability of the pcibusreleasedomainnr function in the Linux operating system is related to the use of memory after it has been released. Exploiting this vulnerability allows an attacker to cause a service failure...
Xcode Dev Tools DoS
The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Xcode Dev Tools DoS
The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Xcode Sandbox Bypass
The IDE CoreML component in the Xcode integrated development environment for operating systems on MacOS has a vulnerability related to access control. Exploiting this vulnerability could allow an attacker to bypass the sandbox protection mechanisms...
FontParser DoS
The vulnerability of the FontParser function in operating systems such as macOS, visionOS, iOS, and iPadOS is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Photon OS 4.0: Linux PHSA-2025-4.0-0881
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0881. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
EUVD-2025-19027
Malicious code in bioql PyPI...