KLA80112 ACE vulnerability in Microsoft Mariner

Use after free vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2023-32002 Related products CBL-Mariner-2.0 CVE list CVE-2023-32002 critical KB list Solution Install...

firefox security update

128.7.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.7.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.7.0-1 - Update to 128.7.0 build1...

Intel® System Security Report and System Resources Defense Advisory

Summary: Potential security vulnerabilities in some Intel® System Security Report and System Resource Defense PPAM firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

Intel® SPS Firmware Advisory

Summary: A potential security vulnerability in some Intel® Server Platform Services Intel® SPS firmware may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-25571 Description: Improper input validation in...

Intel® Data Streaming Accelerator Advisory

Summary: A potential security vulnerability in the Intel® Data Streaming Accelerator Intel® DSA for some Intel® Xeon® Processors may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-37020 Description:...

KB5052108: Servicing stack update for Windows Server 2012 R2: February 11, 2025

None None...

Security Updates for Microsoft SharePoint Server 2016 (February 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a Remote Code Execution Vulnerability %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid216137;...

KB5052109: Servicing stack update for Windows Server 2012: February 11, 2025

None None...

Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal

SUMMARY Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released new versions for several...

Siemens SIPROTEC 5

SUMMARY Affected SIPROTEC 5 devices do not encrypt certain data within the on-board flash storage on their PCB. This could allow an attacker with physical access to read the sensitive information from the filesystem of the device. Siemens is preparing fix versions and recommends specific...

AMD Client Processors February 2025 Security Update

AMD has informed HP of potential vulnerabilities in platform components for some AMD Client Processors, which might allow arbitrary code execution, loss of integrity, loss of confidentiality, or loss of availability. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has...

Intel Graphics Software February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities Intel has released updates to mitigate the potential...

Intel 2024.4 IPU - Processor February 2025 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified affected...

thunderbird security update

128.7.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.7.0 - Add OpenELA debranding 128.7.0-1 - Update to 128.2.0 build1...

Azure Linux 3.0 Security Update: avahi (CVE-2023-38472)

The version of avahi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38472 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the avahirdataparse function...

Intel® QuickAssist Technology Software Advisory

Summary: A potential security vulnerabilities in some Intel® QuickAssist Technology software may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-31858...

2024.4 IPU, Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-31068 Description: Improper Finite State Machines FSMs in Hardware Logic for som...

Intel® 800 Series Ethernet Driver Software

Summary: Potential security vulnerability in Intel® 800 Series Ethernet Driver software may allow informational disclosure. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39286 Description: Incorrect execution-assigned permissions in th...

Intel® PROSet/Wireless WiFi and Killer™ WiFi Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Killer™ WiFi software products may allow information disclosure or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

Security Updates for Microsoft Excel Products (February 2025)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...