CVE-2024-28127

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-31276

Heap-based buffer overflow in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow a privileged user to enable...

Ivanti Connect Secure and Ivanti Policy Secure external file control vulnerability

RISK EVALUATION Ivanti Connect Secure and Ivanti Policy Secure contain a vulnerability that allows a remote, authenticated attacker to write arbitrary files. These vulnerabilities are addressed in Ivanti Connect Secure version 22.7R2.6 and Ivanti Policy Secure version 22.7R1.3. 2. RECOMMENDED...

CVE-2025-25200

creationtimestamp| type| source ---|---|--- 2025-02-12 18:08:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113992250696737741 2025-02-12 18:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrreespr2i 2025-02-12 20:13:59+00:00| seen|...

CVE-2025-0925

creationtimestamp| type| source ---|---|--- 2025-02-12 17:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyoft4tyv2x 2025-02-12 18:19:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry42kol2o...

CVE-2025-25184

Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious conten...

CGA-3487-J7M3-R87P

Bulletin has no description...

CVE-2025-1244

creationtimestamp| type| source ---|---|--- 2025-02-12 15:16:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqxduf32a 2025-02-12 15:27:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113991617138204821 2025-02-12 16:48:38+00:00| seen|...

CVE-2025-0376

An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via a change page...

CVE-2024-57951

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions from CPUHPONLINE to halfway through a CPU hotunplug down to CPUHPHRTIMERSPREPARE, and then back to CPUHPONLINE: Since hrtimerspreparecpu...

Delivering Malware Through Abandoned Amazon S3 Buckets

Here's a supply-chain attack just waiting to happen. A group of researchers searched for, and then registered, abandoned Amazon S3 buckets for about $400. These buckets contained software libraries that are still used. Presumably the projects don't realize that they have been abandoned, and still...

CVE-2024-13532

creationtimestamp| type| source ---|---|--- 2025-02-12 11:36:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113990709281718324 2025-02-12 12:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5nvolko2h 2025-02-12 13:10:37+00:00| seen|...

Vulnerabilities fixed in Ivanti Connect Secure and Ivanti Policy Secure

Ivanti has fixed vulnerabilities in Connect Secure and Policy Secure. The most pressing vulnerabilities include buffer overflow, command injection and code injection. These vulnerabilities allow remote authenticated attackers to remotely execute code, gain unauthorized access to sensitive...

Updated calibre packages fix security vulnerabilities

linktolocalpath in ebooks/conversion/plugins/htmlinput.py in calibre before 6.19.0 can, by default, add resources outside of the document root. CVE-2023-46303 Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read. CVE-2024-6781 Improper access control i...

BELL-CVE-2024-12797

Bulletin has no description...

Ivanti Patches Critical Flaws in Connect Secure and Policy Secure – Update Now

Ivanti has released security updates to address multiple security flaws impacting Connect Secure ICS, Policy Secure IPS, and Cloud Services Application CSA that could be exploited to achieve arbitrary code execution. The list of vulnerabilities is below - CVE-2024-38657 CVSS score: 9.1 - External...

Microsoft Patch Tuesday, February 2025 Edition

Microsoft today issued security updates to fix at least 56 vulnerabilities in its Windows operating systems and supported software, including two zero-day flaws that are being actively exploited. All supported Windows operating systems will receive an update this month for a buffer overflow...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.45 packages and security update

Red Hat OpenShift Container Platform release 4.15.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

CGA-M3H4-R4GV-2X42

Bulletin has no description...

[SECURITY] Fedora 41 Update: bind-dyndb-ldap-11.10-33.fc41

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...