OESA-2025-2453 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a...

Siemens Solid Edge Multiple Vulnerabilities (SSA-541582)

The version of Siemens Solid Edge installed on the remote Windows host is prior to SE2024 V224.0 Update 14 or SE2025 V225.0 Update 6. It is, therefore, affected by multiple vulnerabilities as disclosed in the SSA-541582 vendor advisory: - The affected applications contains an out of bounds write...

The vulnerability of the /thread/{id}/download-attachments component in the Extended Attachments module of the FreeScout support service system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the /thread/id/download-attachments component in the Extended Attachments module of the FreeScout support service management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

SUSE: Security Advisory (SUSE-SU-2025:03600-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-10577

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities...

The vulnerability of the system’s external link function for requests, incidents, and inventory management of computer equipment in GLPI allows a hacker to disclose protected information.

The vulnerability of the system’s external link functions for requests, incidents, and inventory management in GLPI is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the VMM component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the VMM component in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-41984

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

Fortinet FortiOS和Fortinet FortiProxy 安全漏洞

Fortinet FortiOS and Fortinet FortiProxy are both products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content...

Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to multiple vulnerabilities due to Apache Axis. CVE-2018-8032, CVE-2014-3596, CVE-2019-0227, CVE-2012-5784

Summary IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to multiple vulnerabilities due to Apache Axis. CVE-2018-8032, CVE-2014-3596, CVE-2019-0227, CVE-2012-5784. Vulnerability Details CVEID:CVE-2018-8032 DESCRIPTION: Apache Axis 1.x up ...

EUVD-2025-33963

HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc...

CVE-2025-31995

The CVE-2025-31995 entry concerns HCL Unica MaxAI Workbench, with the root cause identified as improper input validation. Multiple connected sources (Red Hat, EU ENISA, NVD, CVE lists, and security vendors) confirm that this vulnerability could enable SQL injection, cross-site scripting (XSS), or...

Fedora 42 : cef (2025-5fac63ba6a)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5fac63ba6a advisory. Update to 140.1.15^chromium140.0.7339.207 rhbz2396308 CVE-2025-10890: Side-channel information leakage in V8 CVE-2025-10891: Integer overflow in V8...

EUVD-2025-33727

Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass.This issue affects Aybs...

PT-2025-41565

Name of the Vulnerable Software and Affected Versions Aybs Interaktif versions 2024 through 28082025 Description The software exhibits flaws in permission management, potentially allowing unauthorized access to sensitive information and enabling privilege abuse and authentication bypass. This cou...

The vulnerabilities of the functions con_fault_finish() and clear_standby() in the kernel module net/ceph/messenger.c of the Linux operating system allow a attacker to execute arbitrary code.

The vulnerabilities of the confaultfinish and clearstandby functions in the net/ceph/messenger.c module of the Linux kernel are related to deficiencies in the authentication process. Exploiting these vulnerabilities could allow an attacker to execute arbitrary code...

The vulnerability of the “Sotbit: Content Parser – websites, Excel, XML, YML, CSV, RSS” plugin arises from insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of the “Sotbit: Content Parser – websites, Excel, XML, YML, CSV, RSS” plugin is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2025-41357

Name of the Vulnerable Software and Affected Versions WP Travel Engine – Tour Booking Plugin – Tour Operator Software versions prior to 6.6.7 Description The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress has a flaw that allows arbitrary file deletion through...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : FORT Validator vulnerabilities (USN-7813-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7813-1 advisory. Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI...

Ubuntu: Security Advisory (USN-7810-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...