12715 matches found
PT-2025-4264 · Oracle · Oracle Communications Order/Service Management
Name of the Vulnerable Software and Affected Versions: Oracle Communications Order and Service Management versions 7.4.0 through 7.5.0 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful...
JVN#83855727: FortiWeb vulnerable to SQL injection
FortiWeb provided by Fortinet, Inc. contains an SQL injection vulnerability CWE-89, CVE-2024-55593. Impact Information in the FortiWeb database may be obtained by a user who can log in to the product. Solution Update the software Update the software to the latest version according to the...
PT-2025-4836
Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 3.5.10 Apache CXF versions prior to 3.6.5 Apache CXF versions prior to 4.0.6 Description A potential denial of service issue is present in Apache CXF. In some edge cases, the CachedOutputStream instances may not be...
DLA-4026-1 tiff - security update
Bulletin has no description...
[SECURITY] [DLA 4022-1] tryton-server security update
Debian LTS Advisory DLA-4022-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert January 19, 2025 https://wiki.debian.org/LTS Package : tryton-server Version : 5.0.33-2+deb11u3 CVE ID : not yet available Debian Bug : none Cédric Krier has found that trytond, the Tryt...
DLA-4020-1 libreoffice - security update
Bulletin has no description...
SUSE-SU-2025:0167-1 Security update for pam_u2f
This update for pamu2f fixes the following issues: - CVE-2025-23013: Fixed problematic PAMIGNORE return values in pamsmauthenticate bsc1233517...
RHSA-2025:0381 Red Hat Security Advisory: .NET 8.0 security update
Bulletin has no description...
PT-2025-2389 · Etic Telecom · Etic Telecom Remote Access Server
Name of the Vulnerable Software and Affected Versions: ETIC Telecom Remote Access Server RAS versions prior to 4.9.19 Description: The issue allows an external attacker with no access to the device to force the end user into submitting a "setconf" method request, which can lead to denial of servi...
PT-2025-2393 · Etic Telecom · Etic Telecom Remote Access Server
Name of the Vulnerable Software and Affected Versions: ETIC Telecom Remote Access Server RAS versions prior to 4.5.0 Description: The issue concerns reflected cross site scripting XSS attacks. This occurs in the get view method under the view parameter. The ETIC RAS web server uses dynamic pages...
DSA-5845-1 tomcat10 - security update
Bulletin has no description...
openSUSE Security Advisory (SUSE-SU-2025:0142-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CGA-58GC-R4XX-4MMW
Bulletin has no description...
RHSA-2025:0335 Red Hat Security Advisory: fence-agents security update
Bulletin has no description...
PT-2025-3755 · Zoom · Zoom Workplace Apps
Name of the Vulnerable Software and Affected Versions: Zoom Workplace App for macOS versions prior to 6.2.10 Description: The issue allows an authenticated user to conduct a denial of service via local access due to symlink following in the installer. Recommendations: For versions prior to 6.2.10...
PT-2025-2609 · Ibm · Ibm Cics Tx Advanced +1
Name of the Vulnerable Software and Affected Versions: IBM CICS TX Advanced versions 10.1 through 11.1 IBM CICS TX Standard version 11.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2025-3568 · Jfinaloa · Jfinaloa
Name of the Vulnerable Software and Affected Versions: JFinalOA versions prior to v2025.01.01 Description: A cross-site scripting XSS vulnerability in the "getBusinessUploadListPage?busid" interface of JFinalOA allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
PT-2025-4889 · Unknown · Emailshroud
Name of the Vulnerable Software and Affected Versions: EmailShroud versions prior to 2.2.1 EmailShroud version 2.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended actions on a...
TrueFiling authorization bypass via user-controlled keys
RISK EVALUATION TrueFiling trusts some client-controlled identifiers passed in URL requests to retrieve information. Platform users must self-register for an account, and once authenticated, could manipulate those identifiers to gain partial access to case information and the ability to...