KB5066835: Windows 11 Version 24H2 / Windows Server 2025 / Windows 11 Version 25H2 Security Update (October 2025)

The remote Windows host is missing security update 5066835. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066873: Windows Server 2012 R2 Security Update (October 2025)

The remote Windows host is missing security update 5066873. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066780: Windows Server version 23H2 Security Update (October 2025)

The remote Windows host is missing security update 5066780. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066586: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2025)

The remote Windows host is missing security update 5066586. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

IGEL OS Use of a Key Past its Expiration Date Vulnerability

IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025

None None...

KB5066794: Servicing stack update for Windows Server 2012 R2: October 14, 2025

None None...

KB5066584: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 14, 2025

None None...

kernel security update

4.18.0-553.79.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Clevo UEFI firmware embedded BootGuard keys compromising Clevo's implementation of BootGuard

Overview Clevo’s UEFI firmware update packages included sensitive private keys used in their Intel Boot Guard implementation. This accidental exposure of the keys could be abused by an attacker to sign malicious firmware using Clevo’s Boot Guard trust chain, potentially compromising the pre-boot...

CVE-2025-52634

HCL AION (AI lifecycle platform) 2.0 is affected by CVE-2025-52634, described as an information disclosure vulnerability enabling unauthorized access. Multiple sources (NVD, RHACVE, CNVD, CNNVD, CVE lists, PT-2025-41539) corroborate that sensitive information can be exposed to an unauthenticated ...

CVE-2025-52634 HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0...

CVE-2025-52634 HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1, <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0, <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: OSV:GHSA-WQM3-W3P6-XJGM...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1, <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0, <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: GHSA-WQM3-W3P6-XJGM...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1, <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0, <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-13539423...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1, <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0, <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: MEND:CVE-2025-62228...

AlmaLinux 10 : grub2 (ALSA-2025:16154)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16154 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. CVE-2024-45776 grub2: fs/ufs: OOB write in the heap CVE-2024-45781 grub2:...

SUSE CVE-2023-53671

In the Linux kernel, the following vulnerability has been resolved: srcu: Delegate work to the boot cpu if using SRCUSIZESMALL Commit 994f706872e6 "srcu: Make Tree SRCU able to operate without snpnode array" assumes that cpu 0 is always online. However, there really are situations when some other...

EUVD-2025-31828

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...