CVE-2024-48126

CVE-2024-48126 affects the HI-SCAN 6040i Hitrax HX-03-19-I: hardcoded credentials in the device enable access to vendor support and service functions. The vulnerability is rated CVSS v3.1: 9.8 (CRITICAL) with Network attack vector and no authentication required, causing high confidentiality, inte...

CVE-2024-55922 Cross-Site Request Forgery in Form Framework Module in TYPO3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2024-55891 Information Disclosure via Exception Handling/Logger in TYPO3

TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the...

.NET 8.0 Update - January 14, 2025 (KB5050525)

None None...

January 14, 2025-Security Only Update for .NET Framework 4.6.2 for Windows Server 2008 SP2 (KB5050181)

None None...

January 14, 2025—KB5050049 (Monthly Rollup)

None None...

January 14, 2025—KB5050048 (Monthly Rollup)

None None...

January 14, 2025—KB5050004 (Monthly Rollup)

None None...

KB5049994: Cumulative security update for Internet Explorer: January 14, 2025

None None...

January 14, 2025—KB5050063 (Monthly Rollup)

None None...

January 14, 2025—KB5050006 (Security-only update)

None None...

.NET 9.0 Update - January 14, 2025 (KB5050526)

None None...

WordPress Octrace Support Pro plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by UKO Patchstack Alliance in WordPress Plugin WordPress HelpDesk & Support Ticket System Plugin – Octrace Support versions = 1.2.7...

SUSE CVE-2024-56639

In the Linux kernel, the following vulnerability has been resolved: net: hsr: must allocate more bytes for RedBox support Blamed commit forgot to change hsrinitskb to allocate larger skb for RedBox case. Indeed, sendhsrsupervisionframe will add two additional components struct hsrsuptlv and struc...

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-1030)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB5050109: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: January 14, 2025

None None...

KB5050116: Servicing stack update for Windows Server 2012: January 14, 2025

None None...

KB5050115: Servicing stack update for Windows Server 2012 R2: January 14, 2025

None None...

EulerOS 2.0 SP10 : python-urllib3 (EulerOS-SA-2025-1013)

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with ProxyManager, the Proxy-Authorization...

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

BeyondTrust Privileged Remote Access PRA and Remote Support RS contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execut...