CVE-2025-30442: Improper Input Validation

The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to gain elevated privileges...

Gen Digital Avast Cleanup Premium security vulnerabilities

Gen Digital Avast Cleanup Premium is an advanced PC cleanup and optimization tool from Gen Digital, Inc. with deep junk cleaning and automated maintenance features. A security vulnerability exists in Gen Digital Avast Cleanup Premium version 24.2.16593.17810, which stems from a mishandling of...

Gen Digital Norton Utilities Ultimate security vulnerabilities

Gen Digital Norton Utilities Ultimate is a suite of professional-grade PC optimization tools from Gen Digital USA. A security vulnerability exists in Gen Digital Norton Utilities Ultimate version 24.2.16862.6344, which stems from a mishandling of symbolic links in NortonUtilitiesSvc, which could...

Gen Digital AVG TuneUp security vulnerability

Gen Digital AVG TuneUp is a professional PC optimization tool from Gen Digital, Inc. that provides system cleanup, performance acceleration and automated maintenance. A security vulnerability exists in Gen Digital AVG TuneUp version 24.2.16593.9844, which stems from a mishandling of symbolic link...

Gen Digital Avast Cleanup Premium security vulnerabilities

Gen Digital Avast Cleanup Premium is an advanced PC cleanup and optimization tool from Gen Digital, Inc. with deep junk cleaning and automated maintenance features. A security vulnerability exists in Gen Digital Avast Cleanup Premium version 24.2.16593.17810, which stems from a mishandling of...

Avira Prime security vulnerability

Avira Prime is a security software from the German company Avira. A security vulnerability exists in Avira Prime version 1.1.96.2, which stems from an arbitrary file deletion issue in Avira.Spotlight.Service.exe, which could lead to elevated privileges...

Znuny security vulnerabilities

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny versions 6.5.14 and earlier and version 7.x prior to version 7.1.6, which stems from insufficient input validation and may result in elevated privileges...

Cisco IOS XE security vulnerabilities

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from insufficient input...

BrightSign Players security vulnerabilities

BrightSign Players is a series of professional-grade digital signage player hardware from BrightSign, powered by BrightSign OS, which supports 4K Ultra HD content playback and interactive control. A security vulnerability exists in BrightSign Players versions prior to v8.5.53.1 and prior to...

OpenText Operations Bridge Manager security vulnerabilities

OpenText Operations Bridge Manager is an enterprise activity and performance management software from OpenText Canada. A security vulnerability exists in OpenText Operations Bridge Manager versions 2023.05, 23.4, 24.2, and 24.4, which stems from improper authorization and could result in elevated...

Red Hat Quay security vulnerabilities

Red Hat Quay is a distributed container image repository from Red Hat, Inc. that is used to build, distribute and deploy containers. A security vulnerability exists in Quay 3.14.0 and earlier versions, which stems from an improperly assigned privilege in the proxy caching feature that could lead ...

Security Bulletin: Multiple Vulnerabilities in VMware vCenter affect Cloud Pak System [CVE-2024-37079, CVE-2024-37080, CVE-2024-37081]

Summary Vulnerabilities in Broadcom VMware vCenter affect IBM Cloud Pak System. Vulnerability Details CVEID:CVE-2024-37079 DESCRIPTION: vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may...

Microsoft Azure Virtual Desktop security vulnerabilities

Microsoft Azure Virtual Desktop is an Azure cloud-based virtual desktop and application delivery service from Microsoft Corporation USA that supports multi-user Windows virtualized environments. A security vulnerability exists in Microsoft Azure Virtual Desktop that stems from a lack of...

Joplin security vulnerabilities

Joplin is an open source note-taking and to-do list application by Laurent Cozic, an individual developer. A security vulnerability exists in Joplin versions prior to 3.3.3, which stems from an API endpoint that can be exploited by a non-administrative user to set the isadmin field, potentially...

Security Bulletin: IBM Security Verify Governance - Identity Manager has multiple vulnerabilities

Summary Multiple security vulnerabilities have been addressed in updates to IBM Security Verify Governance - Identity Manager software component and IBM Security Verify Governance - Identity Manager virtual appliance component. Vulnerability Details CVEID:CVE-2024-38809 DESCRIPTION: VMware Tanzu...

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2023-1260)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability in the Kubernetes API server that may allow an authenticated user evade security context constraints SCCs admission restrictions, thereby gaining control of a privileged pod CVE-2023-1260. Vulnerability Details CVEID:...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 138, which stems from a mishandled file locking behavior that could lead to elevated privileges...

WordPress plugin: Security vulnerabilities in integration between Eduzz and Woocommerce

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

WordPress plugin BM Content Builder has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Service Finder Bookings has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...