CGA-J46W-4JHR-2Q8J

Bulletin has no description...

CVE-2025-27647

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.913 Application 20.0.2253 are vulnerable to a security flaw that allows the addition of partial admin users without authentication . This vulnerability (identified as V-2024-002) stems from a missing authentication...

Employee Leaves Management System 2.1 Insecure Direct Object Reference

Employee Leaves Management System version 2.1 suffers from an insecure direct object reference vulnerability. Exploit Title: Employee Leaves Management System ELMS v2.1 - Authenticated Insecure Direct Object References IDOR Date: 2025-03-04 Exploit Author: Mehmet Can Kadıoğlu a.k.a mao7un Vendor:...

RHEL 9 : Red Hat Product OCP Tools 4.17 Openshift Jenkins (RHSA-2025:2218)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2218 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

Linux Distros Unpatched Vulnerability : CVE-2024-26973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fat: fix uninitialized field in nostale filehandles When fatencodefhnostale encodes file handle without a parent it stores only first 10 bytes of the file handl...

Linux Distros Unpatched Vulnerability : CVE-2024-43858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jfs: Fix array-index-out-of-bounds in diFree CVE-2024-43858 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 8090...

LibreOffice Arbitrary Script Execution Vulnerability (Mar 2025) - Linux

LibreOffice is prone to an arbitrary script execution vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Linux Distros Unpatched Vulnerability : CVE-2024-45614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermediate proxies such as X-Forwarded-For by...

Linux Distros Unpatched Vulnerability : CVE-2021-3155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snapd 2.54.2 and earlier created /snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read...

Linux Distros Unpatched Vulnerability : CVE-2024-46811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox Why Coverity reports OVERRUN warning. soc.numstates could be 40. But array range...

Mozilla Thunderbird ESR Security Update (mfsa_2025-18) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenPanel 0.3.4 Remote Code Execution

OpenPanel version 0.3.4 suffers from a remote code execution vulnerability via /fix-permissions. Exploit Title: OpenPanel 0.3.4 - Remote Code Execution via Fix Permission Date: Nov 7, 2024 Exploit Author: Punthat Siriwan, Korn Chaisuwan, Pongtorn Angsuchotmetee Vendor Homepage:...

Linux Distros Unpatched Vulnerability : CVE-2024-26902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: RISCV: Fix panic on pmu overflow handler 1 idx of int is not desired when setting bits in unsigned long overflowedctrs, use BIT instead. This panic happen...

Teachers Record Management System 2.1 Cross Site Scripting

Teachers Record Management System version 2.1 suffers from a cross site scripting vulnerability. Exploit Title: Teachers Record Management System v2.1 | Unauthenticated Cross-Site Scripting XSS Date: 2025-03-04 Exploit Author: Mehmet Can Kadıoğlu a.k.a mao7un Vendor:...

CVE-2025-1938

creationtimestamp| type| source ---|---|--- 2025-03-04 15:50:48+00:00| seen| https://t.me/cvedetector/19506 2025-03-04 17:14:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljkxogmk3u2y...

Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update

An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.12. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2025-1937

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabilit...

CVE-2025-22225

creationtimestamp| type| source ---|---|--- 2025-03-04 12:31:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6366 2025-03-04 13:00:28+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/114104285789301930 2025-03-04 13:37:08+00:00| seen|...

CVE-2025-26849

creationtimestamp| type| source ---|---|--- 2025-03-04 09:31:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6358 2025-03-04 10:59:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp3ey7n2p 2025-03-04 12:30:09+00:00| seen| https://t.me/cvedetector/19491 2025-03-06...

CVE-2024-58048

creationtimestamp| type| source ---|---|--- 2025-03-04 07:30:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6348 2025-03-04 09:58:54+00:00| seen| https://t.me/cvedetector/19479 2025-03-04 10:59:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp3zv5v2p...