12567 matches found
Schneider Electric Software Update < 3.0.12 Privilege Escalation
The version of Schneider Electric Software Update installed on the remote host is prior to 3.0.12. It is, therefore, affected by a link following vulnerability that allows arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruptio...
Schneider Electric Software Update Installed (Windows)
Binary data schneiderelectricsoftwareupdate.nbin...
Seagate Toolkit registers a Windows service with an unquoted file path
Overview Seagate Toolkit provided by Seagate Technology contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-9043 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to the developer and IPA. JPCERT/CC coordinated with the developer...
SUSE: Security Advisory (SUSE-SU-2025:02770-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-33012 · Netis · Netis Wf2780
Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.2.35445 Description: A null pointer dereference issue exists in the FUN 0048a728 function within the cgitest.cgi file. Exploitation involves controlling the CONTENT LENGTH variable, which can lead to a denial-of-service...
RHSA-2025:13674 Red Hat Security Advisory: toolbox security update
Bulletin has no description...
PT-2025-32923 · Adobe · Indesign Desktop
Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and 19.5.4 and earlier, are affected by an out-of-bounds write issue that may lead to arbitrary co...
PT-2025-32750 · Unknown · Edge Orchestrator
Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: An uncontrolled resource consumption issue in some Edge Orchestrator software may allow an authenticated user to potentially cause a denial of service via adjacent access...
Security Bulletin: NVIDIA NeMo Framework - August 2025
NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest NVIDIA Nemo Framework from NVIDIA GitHub. Go to NVIDIA Product Security...
AI Playground Software Advisory
Summary: A potential security vulnerability for some AI Playground software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27559 Description: Incorrect default permissions for some AI Playgrou...
Intel® QuickAssist Technology Software Advisory
Summary: A potential security vulnerability for some Intel® QuickAssist Technology software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20090 Description: Untrusted Pointer Dereference for some...
Siemens SIMATIC RTLS Locating Manager
SUMMARY Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate...
PT-2025-32924 · Adobe · Indesign Desktop
Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 and earlier, are affected by an Access of Uninitialized Pointer issue. Successf...
Security Bulletin: NVIDIA Apex - August 2025
NVIDIA has released a software update for NVIDIA Apex. To protect your system, install the software including the Github release 25.07 of NVIDIA Apex. Go to NVIDIA Product Security...
PT-2025-32737 · Unknown · Edge Orchestrator
Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: Improper neutralization in some Edge Orchestrator software may allow an unauthenticated user to potentially enable information disclosure via adjacent access. Recommendations: Update Ed...
Intel PROSet/Wireless WiFi Software August 2025 Security Update
Intel has informed HP of a potential security vulnerability for some Intel® PROSet/Wireless WiFi Software for Windows, which might allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential...
Security Bulletin: NVIDIA Merlin Transformers4Rec - August 2025
NVIDIA has released a software update for NVIDIA Merlin Transformers4Rec. To protect your system, install the software including the Github commit b7eaea5 of NVIDIA Merlin Transformers4Rec. Go to NVIDIA Product Security...
MINI-9X2V-XFF8-RH8R
Bulletin has no description...
JVN#21048820: WordPress plugin "Advanced Custom Fields" vulnerable to HTML injection
Advanced Custom Fields provided by WPEngine, Inc. contains the following vulnerability. HTML injection CWE-94 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N Base Score 4.6 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N Base Score 3.4 CVE-2025-54940 Impact Crafted HTML code may be...