Cisco IOS XE Software for Catalyst 9000 Series Switches Denial of Service Vulnerability

A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic. This vulnerability is due to improper handling of crafte...

CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing data sent by FE driver...

CVE-2025-27077 Use After Free in Automotive Software platform based on QNX

Memory corruption while processing message in guest VM...

Cisco IOS XE security vulnerabilities

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from improper package...

PT-2025-39296

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A flaw exists in the implementation of the TACACS+ protocol that may allow a remote attacker to view sensitive data or bypass authentication. The issue...

Cisco IOS and Cisco IOS XE Software authorization issue vulnerabilities

Cisco IOS and Cisco IOS XE Software are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is a network operating system. An authorization issue vulnerability exists in Cisco IOS and Cisco IOS XE Software that stems from not...

PT-2025-39312

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw in Cisco IOS XE Software may allow an attacker with level-15 privileges or physical access to a device to execute persistent code during boot and compromise the system’s...

Cisco IOS and Cisco IOS XE security vulnerabilities

Cisco IOS and Cisco IOS XE are both products of Cisco, Inc.Cisco IOS is a suite of operating systems developed for its network devices.Cisco IOS XE is a single operating system. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE...

Android Information Disclosure

The vulnerability of the Android operating system is related to errors in information processing. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

Android assertSafeToStartCustomActivity Privilege Escalation

The vulnerability of the assertSafeToStartCustomActivity function in the AppRestrictionsFragment.java file of the Android operating system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow attackers to gain increased privileges...

CVE-2025-9588

CVE-2025-9588 describes an OS command injection in Iron Mountain Archiving Services Inc. EnVision prior to 250563, caused by improper neutralization of special elements in input that could lead to command execution. The vulnerability impacts EnVision versions before 250563 and is rated CRITICAL (...

Number withdrawal

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States...

Iron Mountain Envision operating system command injection vulnerability

Iron Mountain enVision is a document archiving and management software from Iron Mountain, Inc. An operating system command injection vulnerability exists in versions prior to Iron Mountain enVision 250563, which stems from improper neutralization of a special element that could lead to OS comman...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0626

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

PHP proc_open Command Execution

The vulnerability of the procopen function in the PHP programming language exists because measures to neutralize the special elements used in operating system commands have not been implemented. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

WebUI Component Full Control

The vulnerability of the WebUI component of the software-hardware complex for diagnosing and monitoring railway infrastructure, the Frauscher FDS102, is related to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability can...

Photon OS 4.0: Sqlite PHSA-2025-4.0-0873

An update of the sqlite package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0873. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-34192 Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 macOS/Linux client deployments are built against OpenSSL 1.0.2h-fips released May 2016, which has been end-of-life since 2019 and is no longer supported by the OpenSSL...

CVE-2025-10589

The N-Reporter, N-Cloud, and N-Probe developed by N-Partner has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

Support Statement - Veeam Software Appliance Customizations

Support Statement Installing additional Linux packages, third-party applications, or changing OS settings other than those that can be controlled via the Veeam Host Management Console on the Veeam Appliances is not supported. Veeam Customer Support cannot provide technical support for appliances...