PT-2025-2627 · Hcl · Hcl Myxalytics

The vulnerable software is HCL MyXalytics. The vulnerability is a malicious file upload vulnerability, which allows attackers to upload and execute malicious files due to the application's acceptance of invalid file uploads, including incorrect content types, double extensions, null bytes, and...

CVE-2024-12805

A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...

CVE-2024-54724

PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion...

Google Chrome Security Update (stable-channel-update-for-desktop-2025-01) - Mac OS X

Google Chrome is prone to a type confusion vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

CVE-2025-0243

Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 13...

PT-2025-49860

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146 Firefox ESR versions prior to 140.6 Thunderbird versions prior to 146 Thunderbird ESR versions prior to 140.6 Description The software contains memory safety bugs that could potentially lead to arbitrary code...

PT-2025-25568

Name of the Vulnerable Software and Affected Versions xmllint affected versions not specified Description A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size...

CVE-2024-47151

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

OESA-2024-2566 arm-trusted-firmware security update

Trusted Firmware-A is a reference implementation of secure world software for Arm A-Profile architectures Armv8-A and Armv7-A, including an Exception Level 3 EL3 Secure Monitor. Security Fixes: Integer Underflow Wrap or Wraparound vulnerability in Renesas arm-trusted-firmware. An integer underflo...

PT-2024-17659 · WordPress · Store Locator For Wordpress With Google Maps – Lotsoflocales

Name of the Vulnerable Software and Affected Versions: The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress version 3.98.9 Description: The issue is a Local File Inclusion vulnerability that allows unauthenticated attackers to include and execute arbitrary files o...

postgresql:15 security update

An update is available for pgaudit, module.pgaudit, module.postgres-decoderbufs, postgres-decoderbufs, pgrepack, module.pgrepack. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

perl-App-cpanminus:1.7044 security update

An update is available for module.perl-CPAN-DistnameInfo, module.perl-Parse-PMFile, perl-String-ShellQuote, perl-App-cpanminus, perl-File-pushd, module.perl-File-pushd, module.perl-String-ShellQuote, perl-Parse-PMFile, module.perl-App-cpanminus, perl-CPAN-DistnameInfo, module.perl-CPAN-Meta-Check...

PT-2024-17752 · Arista · Arista Ng Firewall

Name of the Vulnerable Software and Affected Versions: Arista NG Firewall affected versions not specified Description: This issue allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to...

gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer

A flaw was found in the Matroska/WebM demuxer in the GStreamer library. Processing a specially crafted input file can cause the usage of uninitialized stack memory, allowing calls to uninitialized function pointers, potentially resulting in code execution or an application crash...

BIT-NODE-MIN-2024-36138

Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via childprocess.spawn / childprocess.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option i...

CVE-2024-49127

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2941)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rockwell Automation Arena < 16.20.06 Multiple Vulnerabilities

The version of Rockwell Automation Arena installed on the remote Windows host is prior to 16.20.06. It is, therefore, affected by a number of different vulnerabilities - A “use after free” code execution vulnerability exists in the affected products that could allow a threat actor to craft a...

[SECURITY] [DLA 3991-1] upx-ucl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3991-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 11, 2024 https://wiki.debian.org/LTS -...