RUSTSEC-2025-0124 rand_os crate is unmaintained

The randos crate is deprecated and no longer actively maintained, as OsRng is now part of randcore. If you are using this crate, consider upgrading to randcore 0.5.1 or higher...

CVE-2025-63916

Summary : CVE-2025-63916 affects MyScreenTools v2.2.1.0. The issue is a critical OS command injection in the GIF compression tool, where the CMD() function in GIFSicleTool/Form_gif_sicle_tool.cs concatenates unsanitized user input (file paths) and executes them via cmd.exe. This allows arbitrary ...

CVE-2025-63916

MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression tool. The application fails to properly sanitize user-supplied file paths before passing them to cmd.exe, allowing attackers to execute arbitrary system commands with the privileges of the user...

Mozilla Thunderbird ESR Security Update (mfsa_2025-91) - Mac OS X

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-63916

MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression tool. The application fails to properly sanitize user-supplied file paths before passing them to cmd.exe, allowing attackers to execute arbitrary system commands with the privileges of the user...

PT-2025-47112

Name of the Vulnerable Software and Affected Versions ThinPLUS affected versions not specified Description ThinPLUS developed by ThinPLUS has an OS Command Injection vulnerability. This allows unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. The...

CVE-2025-64444

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in NCP-HG100 1.4.48.16 and earlier. If exploited, a remote attacker who has obtained the authentication information to log in to the management page of the product may execute an arbitrary OS...

Photon OS 5.0: Linux PHSA-2025-5.0-0677

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0677. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-2499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the S IFMT bits of inode-i mode can become invalid when the S IFMT bits of the "mode" field loaded from disk are corrupted. This occurs because t...

CVE-2025-4619

A denial-of-service DoS vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet through the dataplane. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. This issue is...

CVE-2025-64444

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in NCP-HG100 1.4.48.16 and earlier. If exploited, a remote attacker who has obtained the authentication information to log in to the management page of the product may execute an arbitrary OS...

CVE-2025-64444

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in NCP-HG100 1.4.48.16 and earlier. If exploited, a remote attacker who has obtained the authentication information to log in to the management page of the product may execute an arbitrary OS...

CVE-2025-64444

CVE-2025-64444 affects NCP-HG100 (1.4.48.16 and earlier). The issue is an OS command injection due to improper neutralization of special elements in commands, allowing a remote attacker who has authenticated access to the management page to execute arbitrary OS commands with root privileges. Red ...

Photon OS 4.0: Linux PHSA-2025-4.0-0906

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0906. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Samba PHSA-2025-4.0-0892

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0892. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-5.0-0679

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-5.0-0677

Updates of 'lz4', 'linux-esx', 'linux' packages of Photon OS have been released...

Photon OS 4.0: Linux PHSA-2025-4.0-0907

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0907. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Mozilla Thunderbird < 140.5

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-91 advisory. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox 145, Firefox ESR...

CVE-2025-36250

CVE-2025-36250 affects IBM AIX 7.2, AIX 7.3, and IBM VIOS 3.1 and 4.1, where the NIM server (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This mode of attack is addressed by IBM bulletin remediation and listed APARs, with fixes delivered f...