3457 matches found
Debian: Security Advisory (DSA-5866-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-22960
creationtimestamp| type| source ---|---|--- 2025-02-13 23:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sz7cjyx2x 2025-02-14 00:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li3xgefapj2z 2025-02-14 01:09:52+00:00|...
PT-2025-6624 · Fortinet · Fortinet Product
Name of the Vulnerable Software and Affected Versions: Fortinet Product affected versions not specified Description: The issue impacts Fortinet Product. No additional details are provided about the nature of the problem or its potential impact. Recommendations: At the moment, there is no...
Improper Input Validation
github.com/drakkan/sftpgo is vulnerable to Improper Input Validation. The vulnerability is due to missing sanitization of the client-provided rsync command, allowing an authenticated remote user to read or write files with the permissions of the SFTPGo server process...
GNU Binutils 安全漏洞
GNU Binutils is a set of programming language utility programs developed by the American GNU community. The programs are primarily used to work with target files in a variety of formats, and are provided with connectors, assemblers, and other tools for target files and archives. A memory corrupti...
AMD Embedded Processors Vulnerabilities – February 2025
AMD ID: AMD-SB-5004 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential vulnerabilities in AMD Embedded processors were reported, and mitigations are being provided through Platform Initialization PI firmware packages...
CGA-W4C9-6M3X-3HJ4
Bulletin has no description...
CGA-JH7R-GHQX-7RC5
Bulletin has no description...
CGA-F9FF-RV6F-X69H
Bulletin has no description...
CVE-2025-24366 Insufficient sanitization of user provided rsync command in SFTPGo
SFTPGo is an open source, event-driven file transfer solution. SFTPGo supports execution of a defined set of commands via SSH. Besides a set of default commands some optional commands can be activated, one of them being rsync. It is disabled in the default configuration and it is limited to the...
Google Chrome Security Update (stable-channel-update-for-desktop-2025-02) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CVE-2022-41930
org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users. Any user logged in or not with access to the page XWiki.XWikiUserProfileSheet can enable or disable any user profile. This might allow to a disabled user to re-enable themselves, or to an attack...
CVE-2020-13493
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an...
CVE-2024-20253
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory...
CVE-2023-40138
creationtimestamp| type| source ---|---|--- 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...
CVE-2025-0795
creationtimestamp| type| source ---|---|--- 2025-01-29 01:31:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113909056961861414 2025-01-29 02:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvlmtjnj2r 2025-01-29 03:15:08+00:00| seen|...
Debian: Security Advisory (DSA-5852-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-57095
creationtimestamp| type| source ---|---|--- 2025-01-24 16:37:59+00:00| seen| https://gist.github.com/wjlin0/ff3ee8afb8f8001faff89bbc03805605 2025-01-24 20:04:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3005 2025-01-24 21:56:25+00:00| seen|...
Kibana 7.17.23/8.15.0 Security Updates (ESA-2024-32, ESA-2024-33)
Kibana allocation of resources without limits or throttling leads to crash ESA-2024-33 An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/metrics/snapshot. This can be carried out by users with read access to the...