CVE-2025-22375

An authentication bypass vulnerability was found in Videx's CyberAudit-Web. Through the exploitation of a logic flaw, an attacker could create a valid session without any credentials. This vulnerability has been patched in versions later than 9.5 and a patch has been made available to all instanc...

April 11, 2025—KB5058922 (OS Build 17763.7240) Out-of-band

None None...

CVE-2025-22375

An authentication bypass vulnerability was found in Videx's CyberAudit-Web. Through the exploitation of a logic flaw, an attacker could create a valid session without any credentials. This vulnerability has been patched in versions later than 9.5 and a patch has been made available to all instanc...

The vulnerability of the formSetPPTPServer() function in the Tenda AC7 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetPPTPServer function in the Tenda AC7 router’s microprogramming software is related to the operation of writing data outside of the buffer in memory when processing the pptpserverstartip and pptpserverendip parameters. Exploiting this vulnerability allows a remote...

CLSA-2025-1744116383 libtiff: Fix of 4 CVEs

CVE-2024-7006: check return value of TIFFCreateAnonField to avoid potential DoS via memory allocation failures - CVE-2023-6228: validate input image codec in tiffcp to prevent heap-based buffer overflow and potential application crash - CVE-2022-40090: improve IFD loop handling in...

April 8, 2025—KB5055561 (Monthly Rollup)

None None...

April 8, 2025—KB5055581 (Monthly Rollup)

None None...

April 8, 2025—KB5055609 (Monthly Rollup)

None None...

April 8, 2025—KB5055557 (Monthly Rollup)

None None...

KB5055515: Cumulative security update for Internet Explorer: April 8, 2025

None None...

April 9, 2025—KB5055547 (OS Build 10240.20979) - EXPIRED

None None...

April 8, 2025—KB5055570 (Security-only update)

None None...

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

KB5055667: Servicing stack update for Windows Server 2012: April 8, 2025

None None...

KB5056457: Servicing stack update for Windows Server 2008 SP2: April 8, 2025

None None...

KB5056456: Servicing stack update for Windows Server 2008 R2 SP1: April 8, 2025

None None...

KB5055665: Servicing stack update for Windows Server 2012 R2: April 8, 2025

None None...

CVE-2025-3346

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptpserverstartip/pptpserverendip leads to buffer overflow. The attack may be launched...

Citrix End User Experience Monitoring service fails to start on the VDA

Citrix End User Experience Monitoring service fails to start. When you try to start the service manually you get the error: service started and then stopped. CDF trace from the VDA shows the event: SemsController,NotMetricRelated Failed to start with exception: System.Security.SecurityException:...

Hotfix XS82ECU1085 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. Note: Citrix Hypervisor 8.2 Cumulative Update 1 reaches end of life on Jun 25, 2025. Upgrade toXenServer...