Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise

A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory AD. "The attack exploits the delegated Managed Service Account dMSA feature that was introduced in Windows Server 2025, works with the default...

CVE-2011-4167

Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp...

CVE-2011-4169

Unspecified vulnerability in HP Managed Printing Administration before 2.6.4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2019-19675

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked...

CVE-2011-4168

Directory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data...

CVE-2012-5219

Cross-site scripting XSS vulnerability in HP Managed Printing Administration MPA before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4166

Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data...

CVE-2019-2319

HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710,...

Fine-Tuning Your Managed Databases: Optimize Performance with Advanced Parameters

Managed database services DBaaS provide a powerful and scalable approach to deploying and managing databases without the overhead of manual maintenance...

PT-2025-22348

Name of the Vulnerable Software and Affected Versions Proget MDM affected versions not specified Description The issue concerns a privilege escalation in Proget MDM, where a low-privileged user can retrieve passwords for managed devices. This allows the user to access functionalities restricted b...

Inedo ProGet 安全漏洞

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5, which stems from a low-privileged user being able to retrieve passwords for managed devices and utilize MDM-restricted features...

CVE-2025-37945

In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsaswitchsuspend and dsaswitchresume from their device PM ops: qca8k-8xxx, bcmsf2, microchip ksz...

DEBIAN-CVE-2025-37945

In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsaswitchsuspend and dsaswitchresume from their device PM ops: qca8k-8xxx, bcmsf2, microchip ksz...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from an incorrect use of the devm API by the PHY LED trigger code, which could lead to a memory leak...

carml (>=21.0.0, <=21.1.0), foliage (>=1.0.1, <=1.5.5) +7 more potentially affected by CVE-2025-47273 via setuptools (58.3.0)

setuptools PYPI version 58.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - carml =21.0.0, =1.0.1, =0.1.0, =0.2.0, =0.0.1, =0.0.4, =0.0.1, =0.0.5 - zowie 1.2.0 Source cves: CVE-2025-47273 Source advisory:...

kernel: HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()

A flaw was found in the Linux kernel's AMD Sensor Fusion Hub SFH Human Interface Device HID driver. Improper memory cleanup during the device's initialization process can lead to memory errors and system instability. A local attacker with low privileges could exploit this to trigger page faults,...

SUSE CVE-2025-37842

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage clk/irq/resources and register the spi controller, but the legacy remove function will be called first during device detach and trigger kern...

CVE-2024-11186: Improper Authentication

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision...

Arista Networks CloudVision Portal 安全漏洞

Arista Networks CloudVision Portal is a suite of web-based user management portals for the CloudVision platform from Arista Networks, USA. The product includes features such as network device configuration, compliance management, change management, and network monitoring management. A security...

RLSA-2025:2667 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Securi...