Zoom Workplace < 6.5.10 Vulnerability (ZSB-25047)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25047 advisory. - Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to...

PT-2025-46397

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw due to unrestricted file upload of a dangerous type within Ring 3 User Applications. This could allow an unprivileged software adversary, combin...

PT-2025-46232

Name of the Vulnerable Software and Affected Versions SAP Business Connector affected versions not specified Description An OS Command Injection issue exists in SAP Business Connector. An authenticated attacker with administrative access and adjacent network access can upload specially crafted...

CVE-2025-64522 Soft Serve is vulnerable to SSRF through its Webhooks

Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cloud metadata endpoints. Version 0.11.1...

Security Bulletin: IBM MQ is affected by multiple vulnerabilities in the IBM Semeru Runtime Environment (CVE-2025-50059, CVE-2025-50106, CVE-2025-30749, CVE-2025-30761, CVE-2025-30754)

Summary Multiple issues were identified with the IBM Semeru Runtime Environment which is shipped with IBM MQ Vulnerability Details CVEID:CVE-2025-50059 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component:...

Zoom Workplace Desktop App < 6.3.10 Vulnerability (ZSB-25015)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25015 advisory. - Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial ...

EUVD-2025-38445

A vulnerability was identified in TOZED ZLT T10 T10PLUS3.04.15. The affected element is an unknown function of the file /reqproc/procpost of the component Reboot Handler. Such manipulation leads to denial of service. Access to the local network is required for this attack to succeed. The exploit ...

CVE-2025-12917

A vulnerability was identified in TOZED ZLT T10 T10PLUS3.04.15. The affected element is an unknown function of the file /reqproc/procpost of the component Reboot Handler. Such manipulation leads to denial of service. Access to the local network is required for this attack to succeed. The exploit ...

CVE-2025-12917

A vulnerability was identified in TOZED ZLT T10 T10PLUS3.04.15. The affected element is an unknown function of the file /reqproc/procpost of the component Reboot Handler. Such manipulation leads to denial of service. Access to the local network is required for this attack to succeed. The exploit ...

CVE-2025-12917

TOZED ZLT T10/T10PLUS_3.04.15: vulnerability in an unknown function of the /reqproc/proc_post file within the Reboot Handler can cause denial of service. Exploitation requires local network access; an exploit is publicly available. Multiple sources (Red Hat, EUVD, NVD, CVE/CVElist, CNNVD, PT-2025...

PT-2025-45576

Name of the Vulnerable Software and Affected Versions TOZED ZLT T10 T10PLUS version 3.04.15 Description A flaw exists in TOZED ZLT T10 T10PLUS. Manipulation of an unknown function within the /reqproc/proc post file of the Reboot Handler component can lead to a denial of service. Access to the loc...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

CVE-2025-45378

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials...

CVE-2025-64180

Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check Time-of-Use TOCTOU...

CVE-2025-64180 Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)

Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check Time-of-Use TOCTOU...

CVE-2025-45378

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials...

EUVD-2025-37896

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials...

PT-2025-45121

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials...

mysql: mariadb: mysqldump unspecified vulnerability (CPU Apr 2025)

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

Astra Linux – Vulnerability in MariaDB

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. The supported versions affected are 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. This vulnerability is difficult to exploit; it allows low-privilege attackers with network access via multiple protocols to...