31550 matches found
PT-2025-43982
Name of the Vulnerable Software and Affected Versions BAE SOCET GXP versions prior to 4.6.0.3 Description The software allows external entities within XML-based files. An attacker can potentially compromise sensitive information by social engineering a user into opening a malicious file, which...
PT-2025-44014
Name of the Vulnerable Software and Affected Versions Dell SupportAssist OS Recovery versions prior to 5.5.15.0 Description Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an issue where sensitive information can be inserted into externally accessible files or directories. A...
CVE-2025-54967
An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in certain XML-based files. An attacker who is able to social engineer a SOCET GXP user into opening a malicious file can trigger a variety of outbound requests, potentially compromising sensitive information in...
Dell SupportAssist OS Recovery 安全漏洞
DELL SupportAssist OS Recovery is a standalone recovery tool pre-installed by Dell on some Windows 10/11 computers to diagnose hardware problems, repair the system, backup files or restore factory settings. DELL SupportAssist OS Recovery suffers from an information disclosure vulnerability that...
CVE-2025-54967
CVE-2025-54967 affects BAE Systems SOCET GXP up to version 4.6.0.3. The issue arises from allowing external entities in certain XML-based files, enabling an attacker who entices a user to open a malicious file to trigger outbound requests and potentially disclose sensitive information. The root c...
PT-2025-44021
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3 GA through update 35 Liferay Portal versions 7.4.0 through 7.4.3.97 Liferay DXP versions 2023.Q3.1 through 2023.Q3.4 Liferay DXP version 2023.Q4.0 Liferay Portal 7.4 GA through update 92 Description An open redirect...
Linux Distros Unpatched Vulnerability : CVE-2025-11716
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Links in a sandboxed iframe could open an external app on Android without the required allow- permission. This vulnerability was fixed in Firefox 144 and...
CVE-2025-54967
An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in certain XML-based files. An attacker who is able to social engineer a SOCET GXP user into opening a malicious file can trigger a variety of outbound requests, potentially compromising sensitive information in...
BAE Systems SOCET GXP 安全漏洞
BAE Systems SOCET GXP is a high-end geographic information image analysis and mapping software from BAE Systems. A security vulnerability exists in BAE Systems SOCET GXP prior to version 4.6.0.3 that originates from allowing external entities to exist in certain XML-based files, which could lead ...
EUVD-2025-36213
An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in certain XML-based files. An attacker who is able to social engineer a SOCET GXP user into opening a malicious file can trigger a variety of outbound requests, potentially compromising sensitive information in...
Siemens SIMATIC Devices Race Condition (CVE-2024-26810)
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...
[SECURITY] [DLA 4350-1] tika security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4350-1 [email protected] https://www.debian.org/lts/security/ Paride Legovini October 26, 2025 https://wiki.debian.org/LTS -...
Debian dla-4350 : libtika-java - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4350 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4350-1 [email protected] https://www.debian.org/lts/security/...
PT-2025-49099
Name of the Vulnerable Software and Affected Versions tika-core versions 1.13 through 3.2.1 tika-parser-pdf-module versions 2.0.0 through 3.2.1 tika-parsers versions 1.13 through 1.28.5 Description Apache Tika incorrectly handles XML external entities when parsing XFA XML Forms Architecture conte...
Debian dsa-6039 : openjdk-25-dbg - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6039 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6039-1 [email protected] https://www.debian.org/securit...
[SECURITY] [DLA 4346-1] openjdk-11 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4346-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 25, 2025 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 6038-1] openjdk-17 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6038-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 25, 2025 https://www.debian.org/security/faq -...
CVE-2025-46425
Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
EUVD-2025-35893
Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because this design predates modern secure-boot or signed-update...
Debian dla-4346 : openjdk-11-dbg - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4346 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4346-1 [email protected]...