CVE-2025-15329 Tanium addressed an information disclosure vulnerability in Threat Response.

Tanium addressed an information disclosure vulnerability in Threat Response...

CVE-2025-15341

Technical details about CVE-2025-15341 are not publicly available in the provided documents. The materials only state that Tanium addressed an incorrect default permissions vulnerability in Benchmark; monitor for updates.

EUVD-2025-206520

Tanium addressed a SQL injection vulnerability in Asset...

PT-2026-5239

Tanium addressed a SQL injection vulnerability in Asset...

CVE-2025-46294

To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry. This prevents attackers from using the tilde character to discover hidden files and directories. This...

CVE-2025-46294

To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry. This prevents attackers from using the tilde character to discover hidden files and directories. This...

Chromium: CVE-2025-13634 Inappropriate implementation in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2025-47420

Name of the Vulnerable Software and Affected Versions Tanium versions affected versions not specified Description Tanium addressed an arbitrary file deletion issue in TanOS. The vulnerability allows for the deletion of arbitrary files. Recommendations At the moment, there is no information about ...

erlang27-27.1.3-1.1 on GA media (moderate)

erlang27-27.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15740-1 Rating: moderate Cross-References: CVE-2020-25623 CVE-2020-35733 CVE-2022-37026 CVE-2023-48795 CVE-2025-48041 CVSS scores: CVE-2022-37026 SUSE : 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L CVE-2023-48795 SUSE : 5.9...

EUVD-2025-177328

Malicious code in parallax-janus-deimos-warp npm...

Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2025-18824)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18824 advisory. 1:21.0.9.0.10-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.9.0.10-1 - Update to jdk-21.0.9+10 GA - Update release notes to...

EUVD-2025-8966

Malicious code in bioql PyPI...

EUVD-2025-29155

Malicious code in bioql PyPI...

Chromium: CVE-2025-11216 Inappropriate implementation in Storage

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-11212 Inappropriate implementation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security

Microsoft is calling attention to a new phishing campaign primarily aimed at U.S.-based organizations that has likely utilized code generated using large language models LLMs to obfuscate payloads and evade security defenses. "Appearing to be aided by a large language model LLM, the activity...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-22874 DESCRIPTION: Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected...

CVE-2025-59378

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it even after the build has ended...

Linux Distros Unpatched Vulnerability : CVE-2025-59378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the...

SUSE CVE-2025-59378

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it even after the build has ended...