CVE-2024-58252

Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-58252

Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-58252

Technical details about CVE-2024-58252 are not publicly available in the provided connected documents. Monitoring for updates is recommended; no confirmed affected products, versions, root cause, exploitability, or fixes are described in the supplied sources.

PT-2025-19868 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns insufficient information protection in the media library module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At the...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21761)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21761 advisory. - In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21763)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21763 advisory. - In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21763)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21763 advisory. - In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21762)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21762 advisory. - In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxm...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21764)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21764 advisory. - In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndiscallocs...

PT-2025-19870 · WordPress · Pgs Core

Name of the Vulnerable Software and Affected Versions: PGS Core plugin for WordPress versions up to, and including, 5.8.0 Description: The issue is related to SQL Injection via the event parameter in the save header builder function due to insufficient escaping on the user-supplied parameter and...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21761)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21761 advisory. - In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21760)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21760 advisory. - In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in...

Langroid Allows XXE Injection via XMLToolMessage

Summary A LLM application leveraging XMLToolMessage class may be exposed to untrusted XML input that could result in DoS and/or exposing local files with sensitive information. Details XMLToolMessage uses lxml without safeguards:...

Microsoft partners with Global Anti-Scam Alliance to fight cybercrime

Being the victim of a scam can be devastating. Unfortunately, the number of people who can attest to the truth of this statement, either because they themselves have been scammed or because it has happened to someone they know, is growing. The Global Anti-Scam Alliance GASA reports that in 2024...

Why Secure Document Management Matters Against Cybersecurity Threats

Cybersecurity threats aren’t just aimed at servers or customer databases. They also target a company’s most vital but…...

Perfection is a Myth. Leverage Isn't: How Small Teams Can Secure Their Google Workspace

Let's be honest: if you're one of the first or the first security hires at a small or midsize business, chances are you're also the unofficial CISO, SOC, IT Help Desk, and whatever additional roles need filling. You're not running a security department. You are THE security department. You're...

RHSA-2025:4440 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

The vulnerability of the CI/CD system’s registration data protection mechanism in TeamCity allows unauthorized access by attackers, enabling them to obtain unauthorized access to protected information.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in the lack of security measures for website structure protection. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

ERPNext 跨站请求伪造漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. ERPNext suffers from a cross-site request forgery vulnerability that can be exploited by attackers to cause unauthorized operations...