1334 matches found
Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions
Trend Micro has released security updates to address multiple security vulnerabilities impacting on-premise versions of Apex Central for Windows, including a critical bug that could result in arbitrary code execution. The vulnerability, tracked as CVE-2025-69258 , carries a CVSS score of 9.8 out ...
The vulnerability of the ControlID iDSecure On-Premises access control system, due to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.
The vulnerability of the ControlID iDSecure On-Premises access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
What is Identity Dark Matter?
The Invisible Half of the Identity Universe Identity used to live in one place - an LDAP directory, an HR system, a single IAM portal. Not anymore. Today, identity is fragmented across SaaS, on-prem, IaaS, PaaS, home-grown, and shadow applications. Each of these environments carries its own...
The vulnerability of Zyxel 4G LTE/5G NR CPE and DSL/Ethernet CPE network devices’ web servers allows a hacker to cause service interruptions.
The vulnerability of Zyxel 4G LTE/5G NR CPE and DSL/Ethernet CPE network devices, which run on microprogramming software, is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to json-20190722.jar
Summary IBM webMethods BPM uses json-20190722.jar for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite...
CVE-2025-67793
An issue was discovered in DriveLock 24.1 through 24.1., 24.2 through 24.2., and 25.1 before 25.1.6. Users with the "Manage roles and permissions" privilege can promote themselves or other DOC users to the Supervisor role through an API call. This privilege is included by default in the...
Description of the security update for SharePoint Server 2016: December 9, 2025 (KB5002821)
None None...
CVE-2025-20385 Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.6, 10.0.2503.7, and 9.3.2411.117, a user who holds a role with a high privilege capability adminallobjects could craft a malicious payload through the href attribute of an anch...
CVE-2025-12766
CVE-2025-12766 is a vulnerability in the Management Console of BlackBerry AtHoc (OnPrem) v7.21 where an insecure direct object reference (IDOR) could allow an attacker to gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System (IWS). Affected component:...
Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.20.4 bug fix update
Red Hat OpenShift Container Platform release 4.20.4 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...
Motex LanScope Endpoint Manager Remote Code Execution (CVE-2025-61932)
Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets. Note that Nessus has not tested for this issue but has instead relied only on th...
Security Updates for Microsoft Dynamics 365 (on-premises) (November 2025) - CVE-2025-62206
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the...
Wazuh 4.14.1
Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...
CVE-2025-62206
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
CVE-2025-62206
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
CVE-2025-62206
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
CVE-2025-62206
CVE-2025-62206 pertains to an information disclosure in Microsoft Dynamics 365 (on-premises) . The vulnerability allows an unauthorized network attacker to disclose potentially sensitive information via exposed data, with a CVSSv3.1 base score of 6.5 (Network, Low attack complexity, No privileges...
EUVD-2025-93431
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
