CVE-2025-58291: Path Traversal: '\..\filename'

Denial of service DoS vulnerability in the office service. Successful exploitation of this vulnerability may affect availability...

CVE-2025-58299: Use After Free

Use After Free UAF vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability...

Photon OS 4.0: Linux PHSA-2025-4.0-0886

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0886. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-58282: Undefined Security Weakness

Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58289: Improper Check for Unusual or Exceptional Conditions

Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability...

CVE-2025-58297: Stack-based Buffer Overflow

Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability...

CVE-2025-58300: Stack-based Buffer Overflow

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability...

CVE-2025-58283: Undefined Security Weakness

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58298: Stack-based Buffer Overflow

Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability...

CVE-2025-58288: Undefined Security Weakness

Denial of service DoS vulnerability in the office service. Successful exploitation of this vulnerability may affect availability...

CVE-2025-31717: Undefined Security Weakness

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2025-58293: Undefined Security Weakness

Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability...

CVE-2025-58292: Path Traversal: 'dir/../../filename'

Denial of service DoS vulnerability in the office service. Successful exploitation of this vulnerability may affect availability...

CVE-2025-31718: Undefined Security Weakness

In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...

CVE-2025-58301: Stack-based Buffer Overflow

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability...

CVE-2025-58278: Exposure of Sensitive Information to an Unauthorized Actor

Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58295: Stack-based Buffer Overflow

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

CVE-2025-54654: Undefined Security Weakness

Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58285: Undefined Security Weakness

Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58284: Undefined Security Weakness

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality...