196239 matches found
CVE-2025-66594
CVE-2025-66594 affects Yokogawa FAST/TOOLS packages (RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) from R9.01 to R10.04. The public description notes that detailed messages on the error page could be exploited by an attacker for other attacks, indicating information leakage or error handling weaknesses;...
CVE-2025-66594
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed on the error page. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN,...
CVE-2025-66595
CVE-2025-66595 affects Yokogawa FAST/TOOLS. The vulnerability is Cross-Site Request Forgery (CSRF) impacting FAST/TOOLS packages RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB from version R9.01 through R10.04. The available sources describe the issue and affected versions but do not provide a root cause ...
CVE-2025-66600
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS HTTP Strict Transport Security configuration. When an attacker performs a Man in the middle MITM attack, communications with the web server could be sniffed. The affected products and...
CVE-2025-66605
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with the autocomplete attribute enabled, the input content could be saved in the browser the user is using. The affected products and versions are as follows:...
PT-2026-7179
Name of the Vulnerable Software and Affected Versions PowerDocu versions prior to 2.4.0 Description PowerDocu, a Windows GUI executable for technical documentation, has a security issue in its JSON parsing process within Flow or App packages. The application incorrectly trusts the $type property ...
PT-2026-7060
Name of the Vulnerable Software and Affected Versions FAST/TOOLS versions R9.01 through R10.04 Description The software is susceptible to Cross-Site Request Forgery CSRF. An attacker could compromise a user’s account by having the user access a crafted link. Recommendations Update to a version...
Linux Distros Unpatched Vulnerability : CVE-2026-2239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the freadpascalstring function when processing a specially crafted PSD Photoshop Document...
PT-2026-7059
Name of the Vulnerable Software and Affected Versions FAST/TOOLS versions R9.01 through R10.04 Description The software displays detailed messages on error pages. This information could be used by attackers for further malicious activities. Recommendations Update to a version later than R10.04...
Critical Photon OS Security Update - PHSA-2026-4.0-0959
Updates of 'libtiff', 'linux', 'ImageMagick' packages of Photon OS have been released...
org.webjars.npm:asn1.js (>=4.0.0, <=5.4.1), org.webjars.npm:asn1.js-rfc5280 (3.0.0) +26 more potentially affected by CVE-2026-2739 via org.webjars.npm:bn.js (>=4.11.6, <=5.2.0)
org.webjars.npm:bn.js MAVEN version =4.11.6, =4.0.0, =4.0.1, =4.0.0, =5.0.0, =6.2.3, =6.6.1 - org.webjars.npm:ethereum-cryptography 0.1.3 - org.webjars.npm:ethers 5.4.6 - org.webjars.npm:ethersprojectaddress 5.4.0 - org.webjars.npm:ethersprojectbignumber 5.4.1 and more Source cves: CVE-2026-2739...
SUSE CVE-2026-25121
apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, a path traversal vulnerability was discovered in apko's dirFS filesystem abstraction. An attacker who can supply a malicious APK package e.g., via a compromised or typosquatte...
Malicious Package
Overview @sporting-life/sportinglife-betslip-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...
SUSE-SU-2026:20338-1 Security update for cockpit-packages
This update for cockpit-packages fixes the following issues: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global bsc1257325...
OPENSUSE-SU-2026:20185-1 Security update for cockpit-packages
This update for cockpit-packages fixes the following issues: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global bsc1257325...
Important Photon OS Security Update - PHSA-2026-5.0-0756
Updates of 'expat' packages of Photon OS have been released...
Oracle Linux 10 : libsoup3 (ELSA-2026-2182)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2182 advisory. - Fix CVE-2026-0719 - Fix CVE-2025-14523 - Add patch for CVE-2025-12105 Tenable has extracted the preceding description block directly from the Oracle...
Linux Distros Unpatched Vulnerability : CVE-2025-47911
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an...