PT-2025-6634 · Intel · Intel Csme Driver

Name of the Vulnerable Software and Affected Versions: IntelR ME driver pack installer engines versions prior to 2422.6.2.0 Description: The issue is related to improper access control in some IntelR ME driver pack installer engines. This may allow an authenticated user to potentially enable...

PT-2025-6626 · Intel · Intel Ethernet Adapter Complete Driver Pack

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Adapter Complete Driver Pack versions prior to 29.1 Description: The issue is related to an uncontrolled search path in some installations of the IntelR Ethernet Adapter Complete Driver Pack. This could potentially allow an...

HPESBGN04809 rev.1 - Certain HPE Ethernet Adapters Using Intel Ethernet Adapter Complete Driver Pack, INTEL-SA-01144, Intel Ethernet Adapter Complete Driver Pack Software Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port 562FLR-SFP+ Adapter - Prior to v11.1.7 HPE Ethernet 1Gb 2-port 368FLR-MMT Adapter - Prior to v1.3612 HPE Ethernet 1Gb 2-port 368i Adapter - Prior to...

PT-2025-6400

Name of the Vulnerable Software and Affected Versions Dedecms versions 5.71sp1 and earlier Description The issue is related to a logic error in the web application that does not properly judge the input GET request, resulting in URL redirection. This allows for potential URL redirect attacks...

Intel® Ethernet Adapter Complete Driver Pack Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Adapter Complete Driver Pack may allow escalation of privilege or denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-24852 Description: Uncontrolled...

Microsoft High Performance Compute Pack 安全漏洞

Microsoft High Performance Compute Pack HPC is a high-performance computing HPC solution from Microsoft Corporation USA that is primarily used to create and manage high-performance computing clusters. A security vulnerability exists in Microsoft High Performance Compute Pack HPC. An attacker...

Intel®  Ethernet Connection I219 Series Software Advisory

Summary: Potential security vulnerabilities in Intel® Ethernet Connection I219 Series may allow denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-39797 Description: Improper access control in some drivers for Intel®...

Intel Ethernet Adapter Complete Driver Pack Software Advisory - Lenovo Support US

No description provided...

CVE-2024-12569

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

CVE-2024-30496

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3...

CVE-2024-32785

Cross-Site Request Forgery CSRF vulnerability in Webangon The Pack Elementor addons allows Cross-Site Scripting XSS.This issue affects The Pack Elementor addons: from n/a through 2.0.8.3...

CVE-2024-50453

Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.0.9...

CVE-2024-50465

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP SEO – Calin Vingan Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 1.6.001...

Security Bulletin: IBM B2B Advanced Communications is vulnerable to issues due to Java SDK (CVE-2022-40609)

Summary IBM B2B Advanced Communications has addressed vulnerabilities in Java SDK shipped with product. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an...

CVE-2024-33568

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3...

SUSE-SU-2025:20054-1 Security update for kubevirt

This update for kubevirt fixes the following issues: - Update to version 1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0 - Fix DV error report via VM printable status - Fix permission error in...

Security Bulletin: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.

Summary IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting CVE-2024-49349. Vulnerability Details CVEID:CVE-2024-49349 DESCRIPTION: IBM Financial Transaction Manager for SWIFT Services is vulnerable to cross-site scripting. This...

The vulnerability of the content_security_policy function in the Action Pack interpreter for Ruby allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the contentsecuritypolicy function in the Action Pack interpreter for Ruby is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to a denial of service (CVE-2024-45085)

Summary IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to a denial of service when a JSF application configured with Sun Reference Implementation 1.2 is deployed. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to stored cross-site scripting (CVE-2024-45071)

Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to stored cross-site scripting in the administrative console. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...