DEBIAN-CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

Vulnerabilities fixed in Schneider Electric Modicon

Schneider Electric has fixed vulnerabilities in Modicon M340, M580 and various communication modules. A malicious party could exploit the vulnerabilities to cause a denial-of-service or gain access to system data and possibly affect the operation of the controllers. For successful abuse, the...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.4.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.4.final) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.3.4.final)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.4.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.6.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.6.final) +3 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.3.6.final)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.6.final -...

UBUNTU-CVE-2025-23013

In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module PAM that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue...

CVE-2024-13215: Exposure of Private Personal Information to an Unauthorized Actor

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.10 via the 'render' function in modules/modal-popup/widgets/modal-popup.php. This makes it possible for authenticated attackers, with Contributor-level acce...

PT-2025-2070

Name of the Vulnerable Software and Affected Versions Elementor Addon Elements plugin for WordPress versions up to, and including, 1.13.10 Description The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, scheduled, and draft...

CVE-2025-0063

SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over the data in Informix database, leading to complete compromise of confidentiality, integrity and...

PT-2025-1290 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 25.12, 26.1 and earlier Description: The issue is related to an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment...

CVE-2025-0063: Improper Neutralization of Special Elements used in an SQL Command

SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over the data in Informix database, leading to complete compromise of confidentiality, integrity and...

CVE-2021-28543 affecting package varnish-modules 0.16.0-4

CVE-2021-28543 affecting package varnish-modules 0.16.0-4. This CVE either no longer is or was never applicable...

GO-2025-3380 Mattermost has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-server

Mattermost has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

Amazon Linux 2023 : perl-Module-ScanDeps, perl-Module-ScanDeps-tests (ALAS2023-2025-797)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-797 advisory. Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a pesky pipe such...

RHEL 9 : kpatch-patch-5_14_0-284_52_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1 (RHSA-2025:0054)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0054 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module i...

CVE-2024-40747

Various module chromes didn't properly process inputs, leading to XSS vectors...

USN-7159-5: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - S390 architecture; - x86 architecture; - Power management core; - GPU...

CVE-2024-13129

A vulnerability was found in Roxy-WI up to 8.1.3. It has been declared as critical. Affected by this vulnerability is the function actionservice of the file app/modules/roxywi/roxy.py. The manipulation of the argument action/service leads to os command injection. The attack can be launched...

PT-2025-43417

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver for Linux nvidia-graphics-drivers nvidia-graphics-drivers-legacy-390xx nvidia-graphics-drivers-tesla-418 nvidia-graphics-drivers-tesla-470 nvidia-graphics-drivers-tesla-535 nvidia-open-gpu-kernel-modules Description The...

PT-2025-43418

Name of the Vulnerable Software and Affected Versions nvidia-graphics-drivers nvidia-graphics-drivers-legacy-390xx nvidia-graphics-drivers-tesla-418 nvidia-graphics-drivers-tesla-470 nvidia-graphics-drivers-tesla-535 nvidia-open-gpu-kernel-modules Description The listed NVIDIA drivers and kernel...