1965 matches found
Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to Temporary File Download (CVE-2024-41771) and Archive File Download (CVE-2024-41770)
Summary IBM Engineering Requirements Management DOORS Next is vulnerable to Temporary File Download CVE-2024-41771 and Archive File Download CVE-2024-41770. Vulnerability Details CVEID:CVE-2024-41770 DESCRIPTION: IBM Engineering Requirements Management DOORS Next could allow a remote attacker to...
Linux Distros Unpatched Vulnerability : CVE-2007-6761
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobufmapping data structures, which allows local users to trigge...
IBM Engineering Requirements Management DOORS Next 安全漏洞
IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A security vulnerability exists in IBM Engineering Requirements Managemen...
IBM Engineering Requirements Management DOORS Next 安全漏洞
IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A security vulnerability exists in IBM Engineering Requirements Managemen...
CVE-2025-27414 MinIO SFTP authentication bypass due to improperly trusted SSH key
MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. On a MinIO server with SFTP...
PCI DSS v4.0.1: The Changes You Need to Know to Qualify for SAQ A
What's changed in PCI DSS v4.0.1? Get a breakdown of what these new requirements mean and how Akamai’s solutions can help...
Exploit for CVE-2025-23942
WP Load Gallery Exploit CVE-2025-23942 📌 Description Unr...
How to Comply with PCI DSS 4.0 Requirements 6.4.3 and 11.6.1
The countdown to compliance is in its final stretch. With the third and final phase of PCI DSS 4.0 requirements taking effect on March 31, 2025, organizations are under increasing pressure to ensure their client-side security measures meet the new requirements. At Imperva, we’re committed to...
SUSE-FU-2025:0661-1 Feature update for slurm and pdsh
This update for slurm and pdsh fixes the following issues: slurm was updated to version 24.11.1 using package slurm2411: - Security issues fixed: CVE-2024-48936: Fixed authentication handling in stepmgr that could permit an attacker to execute processes under other users' jobs bsc1236722...
Streamline Security: Automate Database Compliance with Qualys Cloud Agent
Compliance audit failures remain a critical challenge for organizations, particularly in database security. According to the 2024 Thales Data Threat Report, nearly 43% of companies failed at least one compliance audit in the past year. This is a significant concern because audit failures correlat...
Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security
CVE-2024-10924 Exploit - WordPress Really Simple SSL Plugin 2F...
CVE-2025-1341
A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The...
CVE-2025-1341
CVE-2025-1341 affects PMWeb 7.2.0, specifically the Setting Handler component, causing weak password requirements. Several connected sources confirm remote exploitation potential with high attack complexity and a high overall risk (CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H; base 8.1). Exploit...
CVE-2023-47248
Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources for example user-supplied input files. This vulnerability only...
New mandatory USCG cyber regulations. What you need to know
TL;DR US Coast Guard introduces mandatory new Marine Transportation System cybersecurity requirements They take effect on July 16, 2025, and training must begin by July 17, 2025 US flagged large commercial vessels affected Cybersecurity Officers CySO need to be appointed Penetration testing of...
CVE-2025-1283
The CVE-2025-1283 vulnerability affects the Dingtian DT-R0 Series (repeater devices). Public records describe an authentication bypass allowing attackers to reach the main page directly without logging in, enabling unauthorized access to device settings. The NVD/ICS references rate the issue as C...
SUSE: Security Advisory (SUSE-SU-2025:0434-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Type Confusion in Google Chrome
CVE-2022-4174CVE-2022-41742 PoC para CVE-2022-4174CVE-2022-4...
The vulnerability of the web service for transmitting information through temporary links, Password Pusher, due to weak password requirements, allows attackers to carry out brute-force attacks.
The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to weak password requirements. Exploiting this vulnerability can allow a remote attacker to carry out a brute-force attack...