14979 matches found
CVE-2025-54533
CVE-2025-54533 affects JetBrains TeamCity versions prior to 2025.07. The issue is due to improper access control that allows disclosure of build settings via VCS configuration. The CVE entry lists a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, low attack complexity, and low co...
CVE-2025-54532
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies...
CVE-2025-54532
CVE-2025-54532 : Affected product is JetBrains TeamCity versions prior to 2025.07. The issue is an improper access control that allows disclosure of build settings via snapshot dependencies. This could lead to exposure of sensitive configuration data. The vulnerability is tied to the TeamCity 202...
CVE-2025-54532
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies...
SUSE-SU-2025:20510-1 Security update for docker
This update for docker fixes the following issues: - Update to Go 1.24 for builds, to match upstream. - Update to Docker 28.3.2-ce. See upstream changelog online at - Update to Docker 28.3.1-ce. See upstream changelog online at - Update to Docker 28.3.0-ce. See upstream changelog online at...
CVE-2025-54532: Incorrect Authorization
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies...
JetBrains TeamCity security vulnerabilities
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...
PT-2025-31122 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: Improper access control allowed the disclosure of build settings via snapshot dependencies. Recommendations: Update to version 2025.07 or later...
PT-2025-31123 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: Improper access control allowed the disclosure of build settings via VCS configuration. Recommendations: Update to TeamCity version 2025.07 or later...
CVE-2025-54533: Incorrect Authorization
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration...
osx-security-awesome
It is an offensive tool for collecting and categorizing OSX and iOS security resources. The primary CVE ID is not present in the provided context. The target product/service or framework is not explicitly stated, but the tool appears to be collecting resources related to OSX and iOS security. The...
Exploit for Improper Input Validation in Jenkins Git_Parameter
CVE-2025-53652: Jenkins Git Parameter Plugin Unvalidated Input...
TOTOLINK T6 serverIp Parameter Buffer Overflow Vulnerability
TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T6 version 4.1.5cu.748B20211015, which stems from the failure of the parameter serverIp in the MQTT Service to correctly validate the length and size of the input...
Fedora 41 : dpkg (2025-0ae3421615)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0ae3421615 advisory. Update to 1.22.20. General cleanup. Fix CVE-2025-6297. ---- Major clean up. - Enable all tests. - Trim changelog. - Adjust Requires and BuildRequires. - Upda...
Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages
Google has announced the launch of a new initiative called OSS Rebuild to bolster the security of the open-source package ecosystems and prevent software supply chain attacks. "As supply chain attacks continue to target widely-used dependencies, OSS Rebuild gives security teams powerful data to...
Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages
Google has announced the launch of a new initiative called OSS Rebuild to bolster the security of the open-source package ecosystems and prevent software supply chain attacks. "As supply chain attacks continue to target widely-used dependencies, OSS Rebuild gives security teams powerful data to...
CVE-2025-8069: Incorrect Default Permissions
During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x8664-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitrary code in the configuration file. If...
CVE-2025-7723
A command injection vulnerability exists that can be exploited after authentication in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407...
