Rockwell Automation 1715 EtherNet/IP Comms Module

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause the web server to crash, requiring a restart to recover. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such...

PT-2025-42137

Name of the Vulnerable Software and Affected Versions Microsoft Failover Cluster Virtual Driver affected versions not specified Description An issue exists in Microsoft Failover Cluster Virtual Driver that allows an authorized attacker to disclose information locally. The issue involves the...

Data Protection Software PowerProtect Data Domain Command Execution Privilege Escalation

The vulnerabilities of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS...

Data Protection Software PowerProtect Data Domain Command Injection

The vulnerabilities of the data protection software through PowerProtect Data Domain backup, the data protection software for corporate environments using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the PowerProtect Data Domai...

Data Domain OS Buffer Overflow DoS

The vulnerabilities of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS...

Data Protection Software Path Traversal Disclosure

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

Data Domain OS Path Traversal

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

Data Protection Software Command Execution Privilege Escalation

The vulnerabilities of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS...

Data Domain OS Command Execution

The vulnerability of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the PowerProtect Data...

Data Protection PowerProtect Cryptographic

The vulnerabilities of the data protection software through PowerProtect Data Domain backup, the data protection software for corporate environments using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the PowerProtect Data Domai...

Fortinet FortiOS and Fortinet FortiProxy authorization issue vulnerabilities

Fortinet FortiOS is a network operating system developed by Fortinet for use in its firewall and network security appliances. A security vulnerability exists in Fortinet FortiOS that stems from a flaw in the authorization mechanism. An attacker could exploit the vulnerability to access static fil...

Microsoft Windows Remote Access Connection Manager Access Control Vulnerability

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet.If this service is disabled, the VPN client application will If you disable this service, VPN client applications will not...

CVE-2025-48813: Use of a Key Past its Expiration Date

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...

CVE-2025-59260: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 7 (6.2.1-97)

This update provides stability fixes and support for cumulative updates. Clusters running version 6.2.1 or later can now upgrade directly to the latest available version in a single step. Vulnerability id: VSTOR-91715 Failed to retry updating the kernel. Vulnerability id: VSTOR-93149, VSTOR-10082...

DOJO authorization issue vulnerabilities

DOJO is an open source JavaScript toolkit from pwn.college. DOJO suffers from an authorization issue vulnerability that stems from improper authentication of the /workspace endpoint, which could lead to unauthorized access to a Windows virtual machine...

DDSH CLI DoS

The vulnerability of the DDSH CLI command-line interface of the data protection software lies in the fact that it relies on buffer overflow attacks within memory. This vulnerability can be exploited by attackers to cause service failures...

SUSE SLES15 Security Update : kernel (Live Patch 24 for SLE 15 SP5) (SUSE-SU-2025:03559-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03559-1 advisory. This update for the Linux Kernel 5.14.21-1505005597 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc:...

SUSE SLES12 Security Update : kernel (Live Patch 64 for SLE 12 SP5) (SUSE-SU-2025:03577-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03577-1 advisory. This update for the Linux Kernel 4.12.14-122244 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix...

PT-2025-42209

Name of the Vulnerable Software and Affected Versions pwn.college DOJO versions prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef Description The /workspace endpoint in pwn.college DOJO has an improper authentication issue. An attacker can access any active Windows VM without authorization...