Schneider Electric Software Update < 3.0.12 Privilege Escalation

The version of Schneider Electric Software Update installed on the remote host is prior to 3.0.12. It is, therefore, affected by a link following vulnerability that allows arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruptio...

Seagate Toolkit registers a Windows service with an unquoted file path

Overview Seagate Toolkit provided by Seagate Technology contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-9043 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to the developer and IPA. JPCERT/CC coordinated with the developer...

SUSE: Security Advisory (SUSE-SU-2025:02770-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-33012 · Netis · Netis Wf2780

Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.2.35445 Description: A null pointer dereference issue exists in the FUN 0048a728 function within the cgitest.cgi file. Exploitation involves controlling the CONTENT LENGTH variable, which can lead to a denial-of-service...

RHSA-2025:13674 Red Hat Security Advisory: toolbox security update

Bulletin has no description...

Security Bulletin: NVIDIA Merlin Transformers4Rec - August 2025

NVIDIA has released a software update for NVIDIA Merlin Transformers4Rec. To protect your system, install the software including the Github commit b7eaea5 of NVIDIA Merlin Transformers4Rec. Go to NVIDIA Product Security...

Intel PROSet/Wireless WiFi Software August 2025 Security Update

Intel has informed HP of a potential security vulnerability for some Intel® PROSet/Wireless WiFi Software for Windows, which might allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential...

PT-2025-32923 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and 19.5.4 and earlier, are affected by an out-of-bounds write issue that may lead to arbitrary co...

Security Bulletin: NVIDIA NeMo Framework - August 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest NVIDIA Nemo Framework from NVIDIA GitHub. Go to NVIDIA Product Security...

Siemens SIMATIC RTLS Locating Manager

SUMMARY Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate...

PT-2025-32750 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: An uncontrolled resource consumption issue in some Edge Orchestrator software may allow an authenticated user to potentially cause a denial of service via adjacent access...

PT-2025-32737 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: Improper neutralization in some Edge Orchestrator software may allow an unauthenticated user to potentially enable information disclosure via adjacent access. Recommendations: Update Ed...

Security Bulletin: NVIDIA Apex - August 2025

NVIDIA has released a software update for NVIDIA Apex. To protect your system, install the software including the Github release 25.07 of NVIDIA Apex. Go to NVIDIA Product Security...

PT-2025-32924 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 and earlier, are affected by an Access of Uninitialized Pointer issue. Successf...

AI Playground Software Advisory

Summary: A potential security vulnerability for some AI Playground software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27559 Description: Incorrect default permissions for some AI Playgrou...

Intel® QuickAssist Technology Software Advisory

Summary: A potential security vulnerability for some Intel® QuickAssist Technology software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20090 Description: Untrusted Pointer Dereference for some...

MINI-9X2V-XFF8-RH8R

Bulletin has no description...

JVN#21048820: WordPress plugin "Advanced Custom Fields" vulnerable to HTML injection

Advanced Custom Fields provided by WPEngine, Inc. contains the following vulnerability. HTML injection CWE-94 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N Base Score 4.6 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N Base Score 3.4 CVE-2025-54940 Impact Crafted HTML code may be...

RHSA-2025:13311 Red Hat Security Advisory: libxml2 security update

Bulletin has no description...

RHSA-2025:13309 Red Hat Security Advisory: libxml2 security update

Bulletin has no description...