CVE-2025-4390

The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validaterestrictions' function. This makes it possible for unauthenticated attackers to extract sensitive data including the content of resticted...

Microsoft Brokering File System 资源管理错误漏洞

Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected: Windows...

Intel 800 Series Ethernet 输入验证错误漏洞

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a...

PT-2025-32940 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are susceptible to a Use After Free issue, potentially leading to arbitrary code execution with current user privileges...

Microsoft SQL Server SQL注入漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is applied under the Microsoft Windows system. A SQL injection vulnerability exists in Microsoft SQL Server. An attacker can exploit the vulnerability to elevate privileges. The following products and...

PT-2025-32763 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.8 and earlier Illustrator version 29.6.1 and earlier Description: Illustrator is susceptible to a NULL Pointer Dereference issue that may result in application denial-of-service. An attacker could exploit this issue ...

PT-2025-32944 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are affected by an out-of-bounds read issue that may lead to sensitive memory disclosure. Exploitation of this issue requir...

PT-2025-32937 · Adobe · Incopy 20.4 +1

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 Description: InCopy versions 20.4, 19.5.4, and earlier are affected by a heap-based buffer overflow that could result in arbitrary code execution in the context of the current user...

Linux Distros Unpatched Vulnerability : CVE-2025-38409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: Fix another leak in the submit error path putunusedfd doesn't free the installed file, if we've already done fdinstall. So we need to also free the...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is a set of e-mail service programs from the American Microsoft Corporation Microsoft. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. The vulnerability is exploited b...

Microsoft Exchange Server 输入验证错误漏洞

Microsoft Exchange Server is a set of e-mail service programs from Microsoft USA. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. An input validation error vulnerability exists in Microsoft Exchange Server that stems from incorrect inpu...

PT-2025-32929 · Adobe · Indesign Desktop 19.5.4 +1

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 are affected by a heap-based buffer overflow that may lead to arbitrary code execution with...

Microsoft Windows Storage Port Driver 信息泄露漏洞

The Microsoft Windows Storage Port Driver is a system-provided storage port driver from Microsoft USA that is particularly suited for high-performance buses, such as NVMe over Fibre Channel FC or FC buses and RAID adapters. An information disclosure vulnerability exists in the Microsoft Windows...

PT-2025-32938 · Adobe · Incopy 20.4 +1

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 Description: InCopy versions 20.4 and earlier, including version 19.5.4, are susceptible to an out-of-bounds write issue. Successful exploitation of this issue could lead to arbitrary cod...

Fedora 42 : mingw-python3 (2025-2e992ddfa0)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2e992ddfa0 advisory. Backport fix for CVE-2025-8194. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Linux Distros Unpatched Vulnerability : CVE-2019-9213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 4.20.14, expanddownwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kern...

Linux Distros Unpatched Vulnerability : CVE-2025-46712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 for OTP-27, OTP-26.2.5.12 for OTP-26, and OTP-25.3.2.21 fo...

PT-2025-32934 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 Description: InCopy is susceptible to a Heap-based Buffer Overflow that may lead to arbitrary code execution with current user privileges. Successful exploitation requires a user to open ...

PT-2025-32926 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are affected by a Heap-based Buffer Overflow that may lead to arbitrary code execution within the current user's context...

Intel 800 Series Ethernet 代码问题漏洞

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. An elevation of privilege vulnerability exists in Intel 800 Series Ethernet that stems from an unchecked exception condition, whi...