37279 matches found
Cortex XDR Agent: Local Windows User Can Disable the Agent
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activit...
CVE-2025-1244
A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...
CVE-2023-7241
creationtimestamp| type| source ---|---|--- 2025-02-12 15:10:09+00:00| seen| https://bsky.app/profile/neodyme.io/post/3lhyhf44inc2b...
CVE-2024-23563
creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeeqhynb2z 2025-02-14 10:05:07+00:00| seen| Telegram/TFFqSfT26ZOJtpMQorftKfykRnf9I0bnr-COpikamZRlN54i...
GitLab 13.3 < 17.6.5 / 17.7 < 17.7.4 / 17.8 < 17.8.2 (CVE-2025-0376)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via ...
Microsoft Office 2016 RCE Vulnerability (KB5002684)
This host is missing an important security update according to Microsoft KB5002684 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5051989)
This host is missing an important security update according to Microsoft KB5051989 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
SUSE: Security Advisory (SUSE-SU-2025:0434-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Office 2016 RCE Vulnerability (KB5002686)
This host is missing an important security update according to Microsoft KB5002686 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2024-54916
creationtimestamp| type| source ---|---|--- 2025-02-11 23:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2shj2s2g 2025-02-12 01:09:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3959 2025-02-12 01:46:35+00:00| seen|...
CVE-2023-31343
creationtimestamp| type| source ---|---|--- 2025-02-11 22:40:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113987656887022195 2025-02-11 23:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2fxn4t2c 2025-02-12 01:11:15+00:00| seen|...
SUSE-SU-2025:0434-1 Security update for python36
This update for python36 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705...
What is Cloud Scanning, and Why Does It Matter?
Cloud environments continue to experience widespread adoption because of their flexibility and dynamic nature. They empower developers to quickly deploy or modify business applications and many other core business functions. However, this very dynamism and complexity also make them difficult to...
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: bnxtre: Avoid undefined behavior in bnxtqpliballocinithwq. Undefined behavior occurs when bnxtqpliballocinithwq is called with hwqattr-auxdepth != 0 and hwqattr-auxstride == 0. In that case, rounduppowoftwohwqattr-auxstride is...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is processed with debounce, and this results in debouncing in software, and the line is subsequently reconfigured to enable edge detection, then the allocation of the kfifo to...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ext4: Make sure the first directory block is not a hole. The syzbot constructs a directory that has no dirblock, but it is not inline; in other words, the first directory block is a hole. No errors are reported when creating file...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation faults during module unloading. The segmentation fault occurs because: During modprobe: 1. In igen6probe, igen6pvt is allocated using kzalloc. 2. In igen6registermci, mci-pvtinfo points to...
Debian: Security Advisory (DLA-4048-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2025:0420-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...