Description of the security update for Microsoft Exchange Server 2019 CU14: December 9, 2025 (KB5071874)

None None...

Description of the security update for Microsoft Exchange Server 2016 CU23: December 9, 2025 (KB5071873)

None None...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: nri-kafka, rabbitmq-messaging-topology-operator, sftpgo-plugin-eventsearch, osv-scanner, nova, kubernetes-event-exporter, opentelemetry-collector-contrib, infinispan-operator, ko, src, terraform-provider-google, spire-controller-manager, rancher-loglevel, gogatekeepe...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: nri-kafka, rabbitmq-messaging-topology-operator, sftpgo-plugin-eventsearch, osv-scanner, nova, kubernetes-event-exporter, opentelemetry-collector-contrib, infinispan-operator, ko, src, terraform-provider-google, spire-controller-manager, rancher-loglevel, gogatekeepe...

CVE-2025-14116 xerrors Yuxi-Know embed.py OtherEmbedding.aencode server-side request forgery

A vulnerability was detected in xerrors Yuxi-Know up to 0.4.0. This vulnerability affects the function OtherEmbedding.aencode of the file /src/models/embed.py. Performing manipulation of the argument healthurl results in server-side request forgery. The attack can be initiated remotely. The explo...

CVE-2025-14116 xerrors Yuxi-Know embed.py OtherEmbedding.aencode server-side request forgery

A vulnerability was detected in xerrors Yuxi-Know up to 0.4.0. This vulnerability affects the function OtherEmbedding.aencode of the file /src/models/embed.py. Performing manipulation of the argument healthurl results in server-side request forgery. The attack can be initiated remotely. The explo...

Backup Job to Cloud Provider Fails to Stop Running Health Check Session

Known Issues - Will be resolved in future release. This issue Issue ID: 1151633 has been identified and reviewed by Veeam's R&D team and will be fixed in a future release. This article serves to document the issue and provide information about workarounds. Challenge Observed Behavior If the Healt...

Yuxi-Know 代码问题漏洞

Yuxi-Know is a knowledge graph intelligence body platform by Wenjie Zhang, an individual developer. A code issue vulnerability exists in Yuxi-Know version 0.4.0 and earlier, which stems from the incorrect manipulation of the parameter healthurl in the file /src/models/embed.py, which could lead t...

SharePoint or OneDrive Backup fails with 'Cannot complete this action'

This article has been updated to document the July 20, 2026, occurrence of this issue. Information regarding the February 2026 occurrence can be found in the More Information section at the very bottom of this article. Challenge A backup attempt for SharePoint Online and OneDrive objects may fail...

CVE-2025-35029 Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page. This content will be rendered and executed when a victim accesses it. This issue is fixed as of...

CVE-2025-35029

CVE-2025-35029 affects Medical Informatics Engineering Enterprise Health with a stored cross-site scripting vulnerability on the Demographic Information page. An authenticated attacker can inject arbitrary content that is rendered and executed when a victim accesses it. The issue is fixed as of 2...

CVE-2025-35029 Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page. This content will be rendered and executed when a victim accesses it. This issue is fixed as of...

PT-2025-47627

Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health affected versions not specified Description An authenticated attacker can inject arbitrary content into the 'Demographic Information' page, leading to the execution of malicious code when a...

CVE-2025-35029: Improper Neutralization of Input During Web Page Generation

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page. This content will be rendered and executed when a victim accesses it. This issue is fixed as of...

Medical Informatics Engineering Enterprise Health 安全漏洞

Medical Informatics Engineering Enterprise Health is a healthcare solution from US-based Medical Informatics Engineering. A security vulnerability exists in Medical Informatics Engineering Enterprise Health that stems from a stored cross-site scripting attack that could lead to the execution of...

CVE-2025-54983

A health check port on Zscaler Client Connector on Windows, versions 4.6 4.6.0.216 and 4.7 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls...

EUVD-2025-119999

A health check port on Zscaler Client Connector on Windows, versions 4.6 4.6.0.216 and 4.7 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls...

CVE-2025-54983

A health check port on Zscaler Client Connector on Windows, versions 4.6 4.6.0.216 and 4.7 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls...

CVE-2025-54983 Health check port on ZCC allows tunnel bypass

A health check port on Zscaler Client Connector on Windows, versions 4.6 4.6.0.216 and 4.7 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls...

CVE-2025-54983 Health check port on ZCC allows tunnel bypass

A health check port on Zscaler Client Connector on Windows, versions 4.6 4.6.0.216 and 4.7 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls...