CVE-2025-42946

Due to directory traversal vulnerability in SAP S/4HANA Bank Communication Management, an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacke...

CVE-2025-42946

CVE-2025-42946 is a directory traversal vulnerability in SAP S/4HANA Bank Communication Management. An attacker with high privileges and access to a specific transaction/method could read or delete sensitive operating-system files, causing high confidentiality impact and low integrity impact; ava...

CVE-2025-42946 Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management)

Due to directory traversal vulnerability in SAP S/4HANA Bank Communication Management, an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacke...

CVE-2025-42946 Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management)

Due to directory traversal vulnerability in SAP S/4HANA Bank Communication Management, an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacke...

PT-2025-32854

Name of the Vulnerable Software and Affected Versions: Windows NTLM affected versions not specified Description: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about a newer versio...

Microsoft Windows Auxiliary Function Driver for WinSock: Resource Management Error Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock. An attacker could exploit the vulnerability to elevate...

Intel PROSet/Wireless WiFi Software code-related vulnerabilities

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A code issue vulnerability exists in Intel PROSet/Wireless WiFi Software for Windows versions prior to 23.110.0.5, which stems from an improperly checked condition that could lead to a denial of...

Fortinet FortiWeb operating system command injection vulnerability

Fortinet FortiWeb is a Web application layer firewall from Fiat Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure Web applications and protect sensitive database content. Fortinet FortiWeb versions 7.6.0 throu...

PT-2025-32626 · Axis · Axis

Name of the Vulnerable Software and Affected Versions: Axis affected versions not specified Description: ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This issue can only be exploited if the Axis device is configured to allow the...

PT-2025-32607 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA Bank Communication Management affected versions not specified Description: A directory traversal issue exists in SAP S/4HANA Bank Communication Management. An attacker with elevated privileges and access to a specific transaction...

Microsoft Windows Local Security Authority Subsystem Service code-related vulnerabilities

The Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone o...

PT-2025-32822 · Microsoft · Windows Lsa +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: A null pointer dereference exists in the Windows Local Security Authority Subsystem Service LSASS. This issue allows an authorized attacker ...

Microsoft Message Queuing security vulnerabilities

Microsoft Message Queuing is a Microsoft solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker exploiting this vulnerability could execute code. The following products and editions...

Microsoft Kernel Streaming WOW Thunk Service Driver security vulnerability

Microsoft Kernel Streaming WOW Thunk Service Driver is a kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Kernel Streaming WOW Thunk Service Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and edition...

Linux Distros Unpatched Vulnerability : CVE-2023-52693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - ACPI: video: check for error while searching for backlight device parent If acpigetparent called in acpivideodevregisterbacklight fails, for...

Siemens SINEC OS

SUMMARY SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to...

Adobe Illustrator < 28.7.9 / 29.0.0 < 29.7.0 Multiple Vulnerabilities (APSB25-74) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.9, 29.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-74 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2025-49564 -...

Linux Distros Unpatched Vulnerability : CVE-2024-41148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command- line tool, affecting ROS distributions Noetic Ninjemys...

Adobe Photoshop 25.x < 25.12.4 / 26.x < 26.9 Vulnerability (macOS APSB25-75)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 25.12.4/26.9. It is, therefore, affected by a vulnerability as referenced in the apsb25-75 advisory. - Out-of-bounds Write CWE-787 potentially leading to Arbitrary code execution CVE-2025-49570 Note that...

CVE-2025-8672

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...