openjdk: Better TLS connection support (Oracle CPU 2025-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-29963

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network...

CVE-2025-29966

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network...

CVE-2025-29963

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network...

CVE-2025-29842

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-29840

Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network...

CVE-2025-29830

Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-29826

Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...

CVE-2025-29830

Technical details about CVE-2025-29830 are not provided in the connected documents. The available data only notes a RRAS information disclosure vulnerability. Monitor official sources for updates on affected products, root cause, and remediation.

CVE-2025-29967

Technical details about CVE-2025-29967 are not provided in the connected documents. Public details in the initial description exist, but no accompanying technical specifics (affected versions, root cause, exploit info, or remediation) are available here. Monitor for updates.

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

PT-2025-20944 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: The issue is related to the improper handling of insufficient permissions or privileges, allowing an authorized attacker to elevate privileges over a network. Recommendations: A...

PT-2025-20971 · Microsoft · Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to deny service over a network. This can affect the system, leadin...

PT-2025-20444 · H3C · H3C Gr-5400Ax

Name of the Vulnerable Software and Affected Versions: H3C GR-5400AX versions up to 100R008 Description: A critical issue has been found that affects the Edit List SSID function of the /goform/aspForm file. The manipulation of the param argument leads to a buffer overflow. This issue can be...

CVE-2025-33072

Improper access control in Azure allows an unauthorized attacker to disclose information over a network...

CVE-2025-1399

Out-of-bounds Read vulnerability in unpackresponse session.c in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network...

CVE-2025-1399 Out-of-bounds Read in libplctag library

Out-of-bounds Read vulnerability in unpackresponse session.c in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network...

PT-2025-20279 · Cisco · Cisco Ios Xe Sd-Wan +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software affected versions not specified Description: A vulnerability in the packet filtering features could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This issue is due to...

CVE-2025-47419

Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from...