Debian dla-4049 : librust-openssl-dev - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4049 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4049-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: NVIDIA Jetson AGX Orin Series and NVIDIA IGX Orin - February 2025

NVIDIA has released software updates for NVIDIA® Jetson AGX Orin™ series and NVIDIA IGX Orin. To protect your system, download and install the latest release for Jetson AGX Orin series as part of the NVIDIA JetPack™ software development kit SDK from NVIDIA DevZone and the latest release for IGX...

CVE-2025-20643

In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID:...

Debian dla-4046 : ark - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4046 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4046-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-25082

creationtimestamp| type| source ---|---|--- 2025-02-07 10:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemqi6ut2v 2025-02-07 10:45:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113962198157304777...

CVE-2025-25088

CVE-2025-25088 corresponds to a Cross-Site Request Forgery to Stored XSS vulnerability in the WordPress plugin WP Keyword Monitor (affected versions: up to 1.0.5). The connected sources describe the issue as CSRF that allows stored XSS, but do not provide concrete details about specific vulnerabl...

CVE-2024-57958

Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2021-4354

The PWA for WP & AMP for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pwaforwpsplashscreenuploader function in versions up to, and including, 1.7.32. This makes it possible for authenticated attackers to upload arbitrary files on the affected sites...

CVE-2025-23208

zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database meta.db is an append-list so group revocations/removals are ignored in the API. SetUserGroups is alled on login, but instead of replacing the group memberships, they are appended...

[SECURITY] [DLA 4042-1] asterisk security update

Debian LTS Advisory DLA-4042-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert February 06, 2025 https://wiki.debian.org/LTS Package : asterisk Version : 1:16.28.0dfsg-0+deb11u6 CVE ID : CVE-2024-53566 Debian Bug : An issue has been found in asterisk, an Open Sourc...

CVE-2022-32204

There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abnormal. Vulnerability ID: HWPSIRT-2022-87185 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-32204...

CVE-2022-32203

There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in the highest privileges of the printer. Vulnerability ID: HWPSIRT-2022-51773 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-32203...

CVE-2024-56473

creationtimestamp| type| source ---|---|--- 2025-02-05 23:06:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113953787364053702 2025-02-05 23:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhpcgidve2c 2025-02-06 01:50:45+00:00| seen|...

Security Bulletin: Vulnerability in Apache Commons IO affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary Potential vulnerability in Apache Commons IO has been identified that affects IBM watsonx Assistant for IBM Cloud Pak for Data. The vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resour...

CVE-2022-4802

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2025-22891

creationtimestamp| type| source ---|---|--- 2025-02-05 17:52:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113952551540292342 2025-02-05 18:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6kh7tzg2t 2025-02-05 21:40:00+00:00| seen|...

CVE-2025-20124

A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit...

Security Bulletin: Vulnerabilities in Java SE affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary Potential vulnerabilities in Java SE has been identified that affects IBM watsonx Assistant for IBM Cloud Pak for Data. The vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-21208 DESCRIPTION: Vulnerability in Java SE...

CVE-2024-34013

Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...

CVE-2024-5455

The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.5.4 via the 'magazinestyle' parameter within the Dynamic Smart Showcase widget. This makes it possible for authenticated attackers, with Contributor-level...