12570 matches found
MINI-4WVH-6RH5-66W2
Bulletin has no description...
MINI-4PGQ-39C4-MC92
Bulletin has no description...
MINI-2626-WCH9-5WMG
Bulletin has no description...
PT-2025-23175 · Netwrix · Netwrix Directory Manager
Name of the Vulnerable Software and Affected Versions: Netwrix Directory Manager formerly Imanami GroupID versions through 10.0.7784.0 Description: The issue is related to a hard-coded password in the software. Recommendations: For versions through 10.0.7784.0, update to a version that does not...
PT-2025-24419 · Zohocorp · Zoho Manageengine Exchange Reporter Plus
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior Description: The issue concerns remote code execution in the Content Search module. It is related to the CWE-434 Unrestricted Upload of File with Dangerous Type. Remote code...
PT-2025-23192 · Ibm · Ibm Db2
Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 12.1.0 through 12.1.1 Description: The issue allows an authenticated user ...
PT-2025-23147 · Teltonika Networks · Teltonika Networks Rms
Name of the Vulnerable Software and Affected Versions: Teltonika Networks Remote Management System RMS versions prior to 5.7 Description: The issue allows for account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they...
PT-2025-23196 · Thimpress · Thimpress Course Builder
Name of the Vulnerable Software and Affected Versions: ThimPress Course Builder versions prior to 3.6.6 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can be exploited due to the deserialization of untrusted data, potentially leading to...
HPESBNW04870 rev.1 - HPE Telco Service Orchestrator software, Remote Cross-Site Scripting (XSS) Vulnerability
Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v5.0.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-1647 |...
PT-2025-23800 · Acronis · Acronis Cyber Protect Cloud Agent
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions before build 40077 Description: The issue is related to local privilege escalation due to insecure file permissions. Recommendations: For versions before build 40077, update to build 40077 or...
DLA-4191-1 firefox-esr - security update
Bulletin has no description...
MGASA-2025-0169 Updated cimg packages fix security vulnerability
A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimglibrary::CImg::loadanalyze. CVE-2024-26540...
Mautic has an Open Redirect vulnerability on user unlock path.
Summary This advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploited by an attacker to redirect legitimate users to malicious websites, potentially leading to phishing attacks or the delivery of exploit kits. Open Redirection...
Mautic allows user name enumeration due to response time difference on password reset form
Summary This advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames. User Enumeration via Timing Attack: A user enumeration vulnerability exists in the...
RHSA-2025:8197 Red Hat Security Advisory: unbound security update
Bulletin has no description...
PT-2025-23227 · Vllm · Vllm
Name of the Vulnerable Software and Affected Versions: vLLM versions 0.8.0 through 0.8.x Description: The issue is a Denial of Service ReDoS that causes the vLLM server to crash if an invalid regex is provided while using structured output. This is similar to a previously identified issue, but it...
PT-2025-23117 · M2Soft · M2Soft Crownix Report & Ers
Name of the Vulnerable Software and Affected Versions: M2Soft CROWNIX Report & ERS versions 7.x through 7.4.3.599 M2Soft CROWNIX Report & ERS versions 8.x through 8.0.3.79 Description: The issue is related to incorrect access control, allowing unauthorized attackers to obtain Administrator accoun...
PT-2025-23121 · Netwrix · Netwrix Directory Manager
Name of the Vulnerable Software and Affected Versions: Netwrix Directory Manager versions prior to 11.1.25134.03 Description: The issue concerns the insertion of sensitive information into sent data. Recommendations: For versions prior to 11.1.25134.03, update to version 11.1.25134.03 or later to...
PT-2025-23052 · Apache · Apache Inlong
Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.13.0 through 2.1.0 Description: The issue is related to the deserialization of untrusted data in Apache InLong, which can lead to the bypass of JDBC URL encoding and backspace. This can potentially cause security...