CVE-2024-13170

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-0869

The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrary options update due to an insufficient check that neglects to verify whether the updated option belongs to the plugin on the instant-images/license...

CVE-2024-8924

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners...

CVE-2024-8733

A potential security vulnerability has been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege. HP is releasing software updates to mitigate this potential vulnerability...

CVE-2023-40222

creationtimestamp| type| source ---|---|--- 2025-02-04 22:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113947928035361056 2025-02-04 23:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf6rykrfc2r 2025-02-05 02:23:50+00:00| seen|...

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the signing verification process, allowing an attacker to replace an existing signed update with another payload and bypass Sparkle’s EdDSA signing checks. Remediation Upgrade...

Security Bulletin: IBM Security Guardium is affected by Kernel vulnerabilities

Summary IBM Security Guardium has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-26930 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by double free of the ha-vpmap pointer. By sending a specially crafted request, a local authenticated...

UBUNTU-CVE-2025-0509

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...

CVE-2025-24968

creationtimestamp| type| source ---|---|--- 2025-02-04 19:33:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113947287785542382 2025-02-04 20:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheurg4uek2r 2025-02-04 20:49:01+00:00| seen|...

CVE-2025-0451

creationtimestamp| type| source ---|---|--- 2025-02-04 18:57:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113947144092757130 2025-02-04 19:05:24+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113947176087524263 2025-02-04 19:15:53+00:00| seen|...

MGASA-2025-0035 Updated libreoffice packages fix security vulnerabilities

Path traversal leading to arbitrary .ttf file write. CVE-2024-12425 URL fetching can be used to exfiltrate arbitrary INI file values and environment variables. CVE-2024-12426...

Security Bulletin: TSSC/IMC is vulnerable to a Prefix truncation attack on Binary Packet Protocol

Summary TSSC/IMC is vulnerable to a Prefix truncation attack on Binary Packet Protocold. A patch has been provided that updates the libssh library. CVE-2023-48795. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH...

CGA-G9H5-GX89-C9V8

Bulletin has no description...

CVE-2025-1017

creationtimestamp| type| source ---|---|--- 2025-02-04 14:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheanyxx2r2r 2025-02-04 14:36:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113946118625489422 2025-02-04 16:23:37+00:00| seen|...

CVE-2025-1020 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-0960

creationtimestamp| type| source ---|---|--- 2025-02-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-08 2025-02-04 20:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheuqydy3v2e 2025-02-04 20:49:00+00:00| seen|...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. Included in this update are updates to closed-source components from Qualcomm, Imagination Technologies, Unisoc and MediaTek. Samsung has fixed vulnerabilities in Samsung Mobile that are relevant to Samsung mobile devices. The vulnerabilities include...

Vulnerabilities fixed in Zimbra Collaboration

Zimbra has fixed several vulnerabilities in Zimbra Collaboration. The vulnerabilities included an SQL injection in the ZimbraSyncService SOAP endpoint and an SSRF vulnerability in the RSS feed parser that allowed unauthorized access and manipulation of the database, as well as unauthorized...

Oracle Linux 9 : podman (ELSA-2025-0922)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0922 advisory. 5.2.2-13.0.1 - podman: do not set rlimits to the default value Orabug: 37310981 - Add devices on container startup, not on creation - overlay: Put should ignore...

CVE-2025-23114

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...