Debian dla-4057 : openssh-client - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4057 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4057-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-26772 WordPress DethemeKit For Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through = 2.1.8...

Advisory ROSA-SA-2025-2695

Software: shim 15.6 OS: ROSA Virtualization 3.0 packageevrstring: shim-15.6 CVE-ID: CVE-2023-40547 BDU-ID: 2024-00725 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability exists in the shim UEFI bootloader due to failure to take measures to neutralize special elements. Exploitation of the vulnerability...

Advisory ROSA-SA-2025-2697

Software: tomcat 9.0.62 OS: ROSA Virtualization 3.0 packageevrstring: tomcat-9.0.62-30.0.2 CVE-ID: CVE-2022-29885 BDU-ID: 2022-03434 CVE-Crit: HIGH CVE-DESC.: An implementation vulnerability in the EncryptInterceptor class of the Apache Tomcat application server is related to incomplete program...

Advisory ROSA-SA-2025-2689

Software: scipy 1.0.0 OS: ROSA Virtualization 3.0 packageevrstring: scipy-1.0.0-21.0.2 CVE-ID: CVE-2023-29824 BDU-ID: 2024-07432 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the PyFindObjects function of the PyFindObjects library for the open source Python programming language scipy is relat...

CVE-2022-26083

creationtimestamp| type| source ---|---|--- 2025-02-14 20:46:40+00:00| seen| https://infosec.exchange/users/cve/statuses/114004197236580362 2025-02-14 21:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li64qiusec26 2025-02-14 22:10:51+00:00| seen|...

CVE-2025-24564

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2e3iqz2c 2025-02-14 15:23:51+00:00| seen| https://infosec.exchange/users/cve/statuses/114002928023557735 2025-02-14 15:45:41+00:00| seen|...

CVE-2025-24554

CVE-2025-24554 affects the WordPress AWcode Toolkit plugin (versions

CVE-2025-25993

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

CVE-2024-38310

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7bv3jln2h 2025-02-12 22:49:19+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113993354965682047 2025-02-12 23:43:15+00:00| seen|...

CVE-2024-39286

Incorrect execution-assigned permissions in the Linux kernel mode driver for the IntelR 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-25203

creationtimestamp| type| source ---|---|--- 2025-02-11 22:52:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113987706268933005 2025-02-11 23:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2x43zh2a 2025-02-12 00:48:41+00:00| seen|...

CVE-2024-32037

creationtimestamp| type| source ---|---|--- 2025-02-11 21:52:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113987467563948370 2025-02-11 22:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwopkap762a 2025-02-11 23:11:20+00:00|...

CVE-2025-24406

creationtimestamp| type| source ---|---|--- 2025-02-11 18:18:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbhqfutj2z...

CVE-2025-21381

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbg4xi6g2a 2025-02-11 20:04:22+00:00| seen|...

CVE-2025-21181

creationtimestamp| type| source ---|---|--- 2025-02-11 18:04:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113986571562383817 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:16:26+00:00| seen|...

CVE-2025-24976

Distribution is a toolkit to pack, ship, store, and deliver container content. Systems running registry versions 3.0.0-beta.1 through 3.0.0-rc.2 with token authentication enabled may be vulnerable to an issue in which token authentication allows an attacker to inject an untrusted signing key in a...

CVE-2025-25241

creationtimestamp| type| source ---|---|--- 2025-02-11 01:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuidhelsq2o 2025-02-11 01:41:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113982706822692310 2025-02-11 03:07:42+00:00| seen|...

Intel® Battery Life Diagnostic Tool Software Advisory

Summary: A potential security vulnerability in some Intel® Battery Life Diagnostic Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-41917 Description: Time-of-check time-of-use rac...

Ethernet Port Configuration Tool Software Advisory

Summary: Potential security vulnerability in some Ethernet Port Configuration Tool EPCT software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39813 Description: Uncontrolled search path for...