3885 matches found
New Rock Technologies Cloud Connected Devices
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker full control of the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...
Rockwell Automation FactoryTalk AssetCentre
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...
Contec Health CMS8000 Patient Monitor (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to remotely send specially formatted UDP requests or connect to an unknown external network that would allow them to write arbitrary data, resulting in remote code execution. The device may also leak patient...
Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security
Security Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security Share January 30th, 2025 Hey Opera users! You might have seen that Opera for Android has achieved a new security-focused milestone: If you search for Opera for Android...
Unraid OS Detection (SSH Login)
SSH login-based detection of Unraid. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.153900";...
GHSA-M4F6-VCJ4-W5MX vulnerabilities
Vulnerabilities for packages: airflow...
Rockwell Automation DataMosaix Private Cloud
RISK EVALUATION Successful exploitation of these vulnerabilities could overwrite reports, including user projects. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...
Rockwell Automation FactoryTalk View Site Edition
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain unauthenticated access to system configuration files and execute DLLs with elevated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...
CVE-2024-45341 vulnerabilities
Vulnerabilities for packages: yace, gitea, trino, neuvector-scanner, bank-vaults, argo-events, kor, kaniko, crane, timoni, grafana-operator, crossplane-provider-keycloak, kustomize, podman, spire-server, argo-workflows, kaf, argo-rollouts, falcosidekick, helm-docs, ctop, gitness,...
HMS Networks Ewon Flexy 202
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to disclose sensitive user credentials. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...
mySCADA myPRO Manager
RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary commands or disclose sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...
DoS in Cilium agent DNS proxy from crafted DNS responses
Impact In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an attacker can crash Cilium agents by sending a crafted DNS response to workloads from outside the cluster. For traffic that is allowed but without using DNS-based policy, the dataplane will continue to pass traffic ...
Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks
As GenAI tools and SaaS platforms become a staple component in the employee toolkit, the risks associated with data exposure, identity vulnerabilities, and unmonitored browsing behavior have skyrocketed. Forward-thinking security teams are looking for security controls and strategies to address...
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2025:0201-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-21503
creationtimestamp| type| source ---|---|--- 2025-01-21 21:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrmpwget2n...
CVE-2025-21567
CVE-2025-21567 affects Oracle MySQL Server (Server: Security: Privileges) with versions 9.1.0 and earlier. The issue is a network-accessible vulnerability that requires low privileges to exploit and can lead to unauthorized read access of a subset of MySQL Server data. The description and related...
CVE-2025-21565
...
CVE-2025-21556
CVE-2025-21556 affects Oracle Agile PLM Framework (9.3.6) via the Agile Integration Services component. The vulnerability permits takeover with network access over HTTP by a low-privilege attacker, with CVSS 3.1 base score 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Oracle’s January 2025 Critical ...
