CVE-2025-54791

CVE-2025-54791 concerns OMERO.web prior to 5.29.2, where an error during the Forgot Password flow could disclose user information in the web page. The issue is mitigated by upgrading to version 5.29.2 or higher. As a workaround, disabling the Forgot Password option via the omero.web.show_forgot_p...

CVE-2025-54791 OMERO.web displays unecessary user information when requesting to reset the password

OMERO.web provides a web based client and plugin infrastructure. Prior to version 5.29.2, if an error occurred when resetting a user's password using the Forgot Password option in OMERO.web, the error message displayed on the Web page can disclose information about the user. This issue has been...

NVIDIA Triton Inference Server Code Execution Vulnerability

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A code execution vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to execute arbitrary code, cau...

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: angle: insufficient input validation can cause undefined behavior CVE-2025-6558 webkitgtk: A download?s origin may be incorrectly associated CVE-2025-43240 webkitgtk: Processing maliciously...

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: angle: insufficient input validation can cause undefined behavior CVE-2025-6558 webkitgtk: A download?s origin may be incorrectly associated CVE-2025-43240 webkitgtk: Processing maliciously...

CVE-2025-24511

Improper initialization in the Linux kernel-mode driver for some IntelR I350 Series Ethernet before version 5.19.2 may allow an authenticated user to potentially enable Information disclosure via data exposure...

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

AVEVA PI Integrator

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, or upload and execute files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...

SAP NetWeaver Application Server ABAP 跨站脚本漏洞

SAP NetWeaver Application Server for ABAP is a powerful development and runtime platform that is at the heart of many basic SAP business applications. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server for ABAP. An attacker could exploit this vulnerability by...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

The vulnerability of the Lighttpd microprogramming software-based web server TRENDnet TN-200 allows a hacker to disclose protected information.

The vulnerability of the Lighttpd microprogramming software-based network storage server TRENDnet TN-200 is related to the use of a static key neV3rUseMe. Exploiting this vulnerability can allow an attacker to disclose the protected information...

ROS-20250812-05

A vulnerability in the framework that enables the development and deployment of RESTful services and RESTEasy applications is related to the insecure creation of temporary files. Exploitation of the vulnerability could allow an attacker to gain access to confidential information...

Siemens SmartClient modules Opcenter QL Home 安全漏洞

Siemens SmartClient modules Opcenter QL Home is a client module from Siemens, Germany. A security vulnerability exists in Siemens SmartClient modules Opcenter QL Home, which stems from unencrypted LDAP communication and could lead to the disclosure of sensitive information...

PT-2025-32732 · Intel · Intel I350 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR I350 Series Ethernet versions prior to 5.19.2 Description: Improper initialization in the Linux kernel-mode driver for some IntelR I350 Series Ethernet may allow an authenticated user to potentially enable information disclosure via da...

BIT-LIBPHP-2024-8929 Leak partial content of the heap through heap buffer over-read in mysqlnd

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server...

Linux Distros Unpatched Vulnerability : CVE-2022-42254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an out-of-bounds array access may lead to denial of...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Aug 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

YugabyteDB 安全漏洞

YugabyteDB is a high-performance transactional distributed SQL database for cloud-native applications from Yugabyte USA. A security vulnerability exists in YugabyteDB that stems from a diagnostic information transfer over HTTP that could lead to the disclosure of sensitive data...

Linux Distros Unpatched Vulnerability : CVE-2022-42265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an integer overflow may lead to information disclosure or...

Linux Distros Unpatched Vulnerability : CVE-2023-25516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead ...