Debian dla-4081 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4081 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4081-1 [email protected]...

CVE-2025-2153

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

CVE-2025-2126

creationtimestamp| type| source ---|---|--- 2025-03-09 17:37:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6970 2025-03-09 19:05:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljxq6qt64g2j 2025-03-09 19:37:21+00:00| seen|...

CVE-2025-2125 Control iD RH iD PDF Document companyId resource injection

A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovantemarcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of...

CVE-2025-2121 Thinkware Car Dashcam F800 Pro File Storage access control

A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an unknown function of the component File Storage. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been...

CVE-2025-2114 Shenzhen Sixun Software Sixun Shanghui Group Business Management System Reset Password Interface OperatorStop.asp improper authorization

A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of t...

CVE-2025-27840

creationtimestamp| type| source ---|---|--- 2025-03-08 20:39:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljvez3nep22j 2025-03-08 20:41:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6948 2025-03-08 22:00:26+00:00| published-proof-of-concept|...

CVE-2023-52971

CVE-2023-52971 affects MariaDB Server 10.10–10.11.* and 11.0–11.4.*, causing crashes in JOIN::fix_all_splittings_in_plan. Connected advisories (ALAS/ALAS2023-2025-1016) indicate fixes in the 10.11 branch (e.g., 10.11.11-1) and list updated packages; apply the recommended security update to mitiga...

CVE-2025-2095

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6897 2025-03-08 00:58:40+00:00| seen| https://t.me/cvedetector/19861 2025-03-08 02:19:46+00:00| seen|...

CVE-2025-27826

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6894 2025-03-08 00:58:46+00:00| seen| https://t.me/cvedetector/19865 2025-03-08 02:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjrao4226 2025-08-16...

CVE-2025-27825

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6893 2025-03-08 00:58:43+00:00| seen| https://t.me/cvedetector/19864 2025-03-08 02:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjrmts62e...

CVE-2025-2024 Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visi...

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to Target Blank Vulnerability (CVE-2024-39727)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to Target Blank Vulnerability CVE-2024-39727. Vulnerability Details CVEID:CVE-2024-39727 DESCRIPTION: IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to...

CVE-2024-12975

The CVE-2024-12975 entry concerns a buffer overread in the Silicon Labs CPC application when operating in full duplex SPI after receiving an invalid SPI packet. The provided connected sources indicate the issue arises in the CPC/SiLabs stack and has a low CVSS base score (1.0, LOW) with physical ...

CVE-2024-53695

The CVE-2024-53695 entry concerns QNAP HBS 3 Hybrid Backup Sync. A buffer overflow (boundary error) in the product could, if exploited, allow a remote attacker to modify memory or crash processes. Public references in the provided documents confirm the vulnerability and indicate a fix in HBS 3 Hy...

CVE-2024-50405

CVE-2024-50405 affects QNAP QTS and QuTS hero with CRLF Injection due to improper neutralization of CRLF sequences. Affected products and versions: QTS 5.2.3.3006 build 20250108 and later; QuTS hero h5.2.3.3006 build 20250108 and later. Root cause is improper CRLF sequence handling, enabling a re...

CVE-2025-2087

creationtimestamp| type| source ---|---|--- 2025-03-07 14:38:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6835 2025-03-07 16:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljsfhm5jey2b 2025-03-07 16:37:08+00:00| seen|...

CVE-2024-12650

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications...

CVE-2025-21843

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthorioctldevquery 'prioritiesinfo' is uninitialized, and the uninitialized value is copied to user object when calling PANTHORUOBJSET. Using memset to initialize 'prioritiesinfo' to avoid th...

CVE-2025-21838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...