Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the /api/v2/hoverfly/middleware endpoint. An attacker can execute arbitrary system commands by supplying crafted input to the binary and script parameters, which are passed directly to command execution without...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the /api/v2/hoverfly/middleware endpoint. An attacker can execute arbitrary system commands by supplying crafted input to the binary and script parameters, which are passed directly to command execution without...

kernel: drm/vkms: Fix use after free and double free on init error

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...

CVE-2025-43887

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-43887

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

Security update for docker

This update for docker fixes the following issues: Update to docker-buildx v0.28.0. See upstream changelog: Update to Docker 28.4.0-ce. See upstream changelog: Update warnings and errors related to "docker buildx ..." so that they reference our openSUSE docker-buildx packages. Enable building...

SUSE-SU-2025:20743-1 Security update for docker

This update for docker fixes the following issues: Update to docker-buildx v0.28.0. See upstream changelog: Update to Docker 28.4.0-ce. See upstream changelog: - Update warnings and errors related to "docker buildx ..." so that they reference our openSUSE docker-buildx packages. - Enable building...

CVE-2025-43887

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-43887

CVE-2025-43887 affects Dell PowerProtect Data Manager running on Hyper‑V (versions 19.19 and 19.20). The root cause is an Incorrect Default Permissions issue which enables a local, low-privileged attacker to perform Elevation of Privilege. Several connected sources corroborate the affected produc...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. The root cause is misconfigured permissions that a low-privileged local attacker could abuse to execute code. Impact is consistent with a local, high-privi...

CVE-2025-10231 N-central Incorrect Default Permissions could lead to Privilege Escalation

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions...

CVE-2025-10231

CVE-2025-10231 affects the N-able N-central Windows Agent and Probe. The issue is an incorrect file handling permission that, under certain conditions, could allow a local low-privilege user to execute commands with elevated permissions (privilege escalation). Public sources in the connected docu...

CVE-2025-41708

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission...

PT-2025-37070

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20 Description: Dell PowerProtect Data Manager, running on Hyper-V, contains an Incorrect Default Permissions issue. A low-privileged attacker with local access could potentially exploit th...

Linux Distros Unpatched Vulnerability : CVE-2020-5248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can...

Dell PowerProtect Data Manager 安全漏洞

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. An elevation of privilege vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20, which stem...