30175 matches found
2025-07 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5062560)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2025-48823
CVE-2025-48823: Windows Cryptographic Services vulnerability allowing an unauthenticated network attacker to disclose information. Connected data lists CVSS v3.1 base score 5.9 (Medium) with Confidentiality Impact high and no listed impact on integrity/availability. The only explicit detail in so...
CVE-2025-5451
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to trigger a denial of service...
Behind the Booking: How Bots Are Undermining Airline Revenue
The airline industry is under constant attack from malicious bots. Bad actors use automation to scrape fares, hoard inventory, commit fraud, and compromise customer accounts. While every airline faces its own unique challenges, the business impacts are remarkably consistent—lost revenue, inflated...
June 10, 2025—KB5060526 (OS Build 20348.3807)
None None...
June 10, 2025—KB5060118 (OS Build 25398.1665)
None None...
June 10, 2025—KB5061059 (Monthly Rollup)
None None...
June 10, 2025—KB5060842 (OS Build 26100.4349)
None None...
GitHub: CVE-2025-48384 Git Symlink Vulnerability
CVE-2025-48384 is regarding a vulnerability in Git where when reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a...
CVE-2025-27042 Incorrect Calculation of Buffer Size in Video
Memory corruption while processing video packets received from video firmware...
CVE-2025-21422 Cryptographic Issues in Automotive
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...
CVE-2025-41224
The CVE-2025-41224 entry applies to RUGGEDCOM devices running V5.X (all versions
RHSA-2025:10484 Red Hat Security Advisory: python3 security update
Bulletin has no description...
Path Traversal
llama-index-readers-obsidian is vulnerable to Path Traversal. The vulnerability is due to improper symlink handling due to failure to resolve symbolic links securely and validate that the resulting paths remain within the intended vault directory, allowing access to files outside the vault...
CVE-2025-24005
CVE-2025-24005 is a local privilege escalation affecting the PHOENIX CONTACT CHARX SEC series, caused by an input validation error in a vulnerable script accessible via SSH. An attacker with a local account can escalate to root. The public documents describe the vulnerability and impact but do no...
CVE-2025-42963
A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...
KB5062554: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (July 2025)
The remote Windows host is missing security update 5062554. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...
PT-2025-28402 · Siemens · Ruggedcom I802 +49
Name of the Vulnerable Software and Affected Versions: RUGGEDCOM i800 All versions RUGGEDCOM i801 All versions RUGGEDCOM i802 All versions RUGGEDCOM i803 All versions RUGGEDCOM M2100 All versions RUGGEDCOM M2200 All versions RUGGEDCOM M969 All versions RUGGEDCOM RMC30 All versions RUGGEDCOM RMC83...
PT-2025-28476 · Ivanti · Ivanti Connect Secure +1
Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue is related to improper access control in the certificate management component. This allows a remote authenticated admin wi...