CVE-2025-1265

creationtimestamp| type| source ---|---|--- 2025-02-20 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-06 2025-02-20 20:56:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lin6hwoy3v2r 2025-02-20 21:17:54+00:00| seen|...

Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to GraphQL Java CVE-2024-40094

Summary Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to GraphQL Java CVE-2024-40094. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-47874 starlette-0.27.0-py3-none-any.whl (Publicly disclosed vulnerability found by Mend) CVE-2024-47874

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-47874 starlette-0.27.0-py3-none-any.whl Publicly disclosed vulnerability found by Mend CVE-2024-47874. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-52798 path-to-regexp-0.1.10.tgz (Publicly disclosed vulnerability found by Mend) CVE-2024-52798

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-52798 path-to-regexp-0.1.10.tgz Publicly disclosed vulnerability found by Mend CVE-2024-52798. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-53981 python_multipart-0.0.17-py3-none-any.whl (Publicly disclosed vulnerability found by Mend) CVE-2024-53981

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-53981 pythonmultipart-0.0.17-py3-none-any.whl Publicly disclosed vulnerability found by Mend CVE-2024-53981. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability...

CVE-2025-1293

creationtimestamp| type| source ---|---|--- 2025-02-20 03:48:26+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114034167356812194 2025-02-20 03:57:01+00:00| seen| https://t.me/cvedetector/18506...

PT-2025-7496 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for rejection is mentioned, but no further details are provided about the issue. Recommendations: At the moment, there is no...

Important: postgresql security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 For more details about the security issues, including the impact, a CVSS score,...

CVE-2024-54961

The monitoring tool Nagios XI version 2024R1.2.2 is affected by an Information Disclosure vulnerability (CVE-2024-54961). The flaw resides in the way the application handles user information, allowing unauthenticated users to access multiple pages that display the usernames and email addresses of...

CVE-2023-51303

creationtimestamp| type| source ---|---|--- 2025-02-19 23:46:02+00:00| seen| https://t.me/cvedetector/18480 2025-02-20 01:27:45+00:00| seen| Telegram/Q51rsSV5kPVAPtouZV4xrqQFBGzr8taAaRMOOuFfq6DWpTnT 2025-02-20 21:02:40+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lin6sskwz...

CVE-2023-51293

creationtimestamp| type| source ---|---|--- 2025-02-19 22:05:42+00:00| seen| https://t.me/cvedetector/18473 2025-02-19 22:06:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwtrcix26 2025-02-20 21:02:36+00:00| seen|...

CVE-2024-25599

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsa3eu2o...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2025-1007

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/namespace/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social media links. The same issues existed in...

CVE-2025-1007

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/namespace/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social media links. The same issues existed in...

CVE-2025-1007 Improper Authorization in /user/namespace/{namespace}/details

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/namespace/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social media links. The same issues existed in...

CVE-2025-1007 Improper Authorization in /user/namespace/{namespace}/details

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/namespace/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social media links. The same issues existed in...

CVE-2025-1007 Improper Authorization in /user/namespace/{namespace}/details

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/namespace/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social media links. The same issues existed in...

CVE-2025-1007

CVE-2025-1007 affects OpenVSX, specifically versions v0.9.0 through v0.20.0. The vulnerability arises in the /user/namespace/{namespace}/details API (and the related /user/namespace/{namespace}/details/logo) where a non-owner/non-contributor user can edit all namespace details (name, description,...

CVE-2024-13336

CVE-2024-13336 affects the Disable Auto Updates plugin for WordPress (versions up to 1.4). The connected report confirms a CSRF vulnerability on the plugin’s Disable Auto Updates page due to missing nonce validation, allowing an unauthenticated attacker to disable all auto updates if they can lur...