Security Advisory Ivanti Endpoint Manager (EPM) October 2025

Security Advisory Ivanti Endpoint Manager EPM October 2025 Multiple CVEs Summary Update Nov. 11, 2025: A fix has been released for CVE-2025-11622 and CVE-2025-9713. To resolve these vulnerabilities customers should update to EPM 2024 SU4. Update Feb. 10, 2026: A fix to resolve the remaining CVE's...

EUVD-2024-53675

Malicious code in bioql PyPI...

EUVD-2024-23469

Malicious code in bioql PyPI...

Security Advisory September 2025 for Ivanti EPM 2024 SU3 and EPM 2022 SU8

Security Advisory Ivanti Endpoint Manager CVE-2025-9712, CVE-2025-9872 Summary Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure...

CVE-2024-39289

A code execution vulnerability has been discovered in the Robot Operating System ROS 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability stems from the use of the eval function to process unsanitized, user-supplied parameter values via special converters fo...

CVE-2024-58006

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pciepcsetbar In commit 4284c88fff0e "PCI: designware-ep: Allow pciepcsetbar update inbound map address" setbar was modified to support dynamically changing the backing physical...

CVE-2024-49355

creationtimestamp| type| source ---|---|--- 2025-02-20 06:27:30+00:00| seen| https://t.me/cvedetector/18509 2025-02-20 06:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lilooxcux22v 2025-02-20 23:26:53+00:00| seen| Telegram/v4AvuBwO3tFAZgc2DFjVweSGbv5LXWuUn-rWB0nVRe6TJ6DD...

BELL-CVE-2024-57938

Bulletin has no description...

CVE-2024-13160

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-53682

In the Linux kernel, the following vulnerability has been resolved: regulator: axp20x: AXP717: set rampdelay AXP717 datasheet says that regulator ramp delay is 15.625 us/step, which is 10mV in our case. Add a AXPDESCRANGESDELAY macro and update AXPDESCRANGES macro to expand to AXPDESCRANGESDELAY...

CVE-2024-57213

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the actionpasswd function...

CVE-2024-55629

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...

BELL-CVE-2024-56746

Bulletin has no description...

CVE-2024-12751

creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1737/ 2024-12-30 20:19:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113743623799370322 2024-12-30 22:39:23+00:00| seen| https://t.me/cvedetector/13963...

CVE-2024-56744

creationtimestamp| type| source ---|---|--- 2024-12-29 12:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legyogm3zn22 2024-12-29 12:40:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113736155699380786 2024-12-29 14:02:26+00:00| seen|...

CVE-2024-56724

In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain for TMU device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited flaws. This was unveiled when...

CVE-2024-56589

creationtimestamp| type| source ---|---|--- 2024-12-27 15:17:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbuo7qyu25 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-53961

creationtimestamp| type| source ---|---|--- 2024-12-23 20:03:29+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3ldypynqt7h2l 2024-12-23 20:12:14+00:00| seen| https://bsky.app/profile/tmjintel.bsky.social/post/3ldyqieobu22t 2024-12-23 20:20:53+00:00| seen|...

CVE-2024-56051

creationtimestamp| type| source ---|---|--- 2024-12-18 18:44:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113675303257117341 2024-12-18 21:13:27+00:00| seen| https://t.me/cvedetector/13229 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

CISCO-SA-20180221-PSC

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:52+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794659106612...