Moderate: Red Hat Security Advisory: krb5 security update

An update for krb5 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2025-47859

creationtimestamp| type| source ---|---|--- 2025-05-13 06:47:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozvaz3xjj2h 2025-05-13 07:10:44+00:00| seen| https://t.me/cvedetector/25161...

CVE-2024-40120

creationtimestamp| type| source ---|---|--- 2025-05-13 02:16:06+00:00| seen| https://gist.github.com/sud0why/1b2115c1d644bd3db1c1b3f16684a78c 2025-05-16 12:34:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16676...

Notice Board System bwdates-reports-details.php File SQL Injection Vulnerability

Notice Board System is a bulletin board system. Notice Board System has a SQL injection vulnerability that stems from improper handling of the parameters fromdate/tomdate in the file /bwdates-reports-details.php. No details of the vulnerability are available at this time...

PT-2025-20898 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an XML Entity Injection vulnerability. No specific details about affected devices, real-world incidents, or technical exploitation details such as API endpoint...

ALSA-2025:7417 Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: dds buffe...

Park Ticketing Management System normal-bwdates-reports-details.php file HTML injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from an HTML injection vulnerability that stems from improper handling of the fromdate and todate parameters in the normal-bwdates-reports-details.php file. No details of the...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1521)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1537)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7506-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-21026 · Apache · Apache Orc

Name of the Vulnerable Software and Affected Versions: Apache ORC versions 1.8.0 through 1.8.8 Apache ORC versions 1.9.0 through 1.9.5 Apache ORC versions 2.0.0 through 2.0.4 Apache ORC versions 2.1.0 through 2.1.1 Description: A Heap-based Buffer Overflow vulnerability has been identified in the...

PT-2025-20820 · Sap Se · Sap S/4Hana Hcm Portugal/Sap Erp Hcm Portugal

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a missing authorization check, allowing an unauthorized user to view the files of other companies. This could lead to the disclosure of personal data of employees...

PT-2025-21022

Name of the Vulnerable Software and Affected Versions Forescout SecureConnector versions 11.1.02.1019 through 11.3.6 Description A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible t...

Adobe ColdFusion Access Control Vulnerability

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an Improper Access Control vulnerability that stems from the system failing to properly restrict access to the file system. No details of the vulnerability are...

Park Ticketing Management System normal-bwdates-reports-details.php file SQL injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the normal-bwdates-reports-details.php file. An attacker could use this vulnerability to...

Important: php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Header parser of http stream wrapper does not handle folded headers CVE-2025-1217 php: Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 php: Streams HTTP wrapper...

Ubuntu: Security Advisory (USN-7506-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Key Exchange Protocol Based on Circulant Matrix Action over Congruence-Simple Semiring

We present a new key exchange protocol based on circulant matrices acting on matrices over a congruence-simple semiring. We describe how to compute matrices with the necessary properties for the implementation of the protocol. Additionally, we provide an analysis of its computational cost and its...

CVE-2025-30011: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected...

PT-2025-20807

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management SRM affected versions not specified Description The issue concerns the use of a deprecated java applet component within the Live Auction Cockpit in SAP SRM. This allows an unauthenticated attacker to send a...