91027 matches found
CVE-2025-58278: Exposure of Sensitive Information to an Unauthorized Actor
Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality...
Photon OS 4.0: Linux PHSA-2025-4.0-0886
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0886. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Yubico YubiKey Manager Installed (Windows)
Binary data yubicoyubikeymanagerwininstalled.nbin...
CVE-2025-60838: Improper Neutralization of Special Elements used in a Command
An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-52634: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0...
CVE-2025-25017: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting XSS...
CVE-2025-21065: Undefined Security Weakness
Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...
Yubico YubiHSM Shell Installed (Linux)
Binary data yubicoyubihsmshellnixinstalled.nbin...
CVE-2025-21064: Undefined Security Weakness
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data...
CVE-2025-25018: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation in Kibana can lead to stored Cross-Site Scripting XSS...
CVE-2025-52630: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0...
CVE-2025-60269: Improper Neutralization of Special Elements used in an SQL Command
JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file...
Photon OS 4.0: Linux PHSA-2025-4.0-0885
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0885. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Linux PHSA-2025-4.0-0884
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0884. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2025-52650: Undefined Security Weakness
Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0...
CVE-2025-37727: Insertion of Sensitive Information into Log File
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...
Exploit for Use After Free in Redis
CVE-2025-49844 RediShell Vulnerability Scanner Описание...
CVE-2025-47338: Untrusted Pointer Dereference
Memory corruption while processing escape commands from userspace...