CVE-2024-6097 Absolute Path Traversal Vulnerability

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2025-1206

creationtimestamp| type| source ---|---|--- 2025-02-12 15:16:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqsj5ui2s 2025-02-12 18:33:37+00:00| seen| https://t.me/cvedetector/17897 2025-02-20 23:27:06+00:00| seen|...

CVE-2024-13421

creationtimestamp| type| source ---|---|--- 2025-02-12 04:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113989033114600468 2025-02-12 05:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6bzjxd2z 2025-02-12 06:48:39+00:00| seen|...

CVE-2024-54160

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

PT-2025-6715 · Unknown +2 · Opensearch +3

Name of the Vulnerable Software and Affected Versions: dashboards-reporting versions prior to 2.19.0.0 OpenSearch versions prior to 2.19 Description: The issue allows cross-site scripting XSS because Markdown is not sanitized when previewing a header or footer. This occurs in dashboards-reporting...

PT-2025-6766 · Progress · Telerik Reporting

Name of the Vulnerable Software and Affected Versions: Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211 Description: Information disclosure is possible by a local threat actor through an absolute path vulnerability. This issue allows a local threat actor to potentially disclose...

Progress Telerik Reporting 安全漏洞

Progress Telerik Reporting is a .NET report embedding tool from Progress, Inc. that enables the creation, design, export, and integration of reports in cloud-based, web and applications. A security vulnerability exists in Progress Telerik Reporting prior to version 2025 Q1, which stems from a loc...

CVE-2024-55212

creationtimestamp| type| source ---|---|--- 2025-02-11 21:58:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113987492046596809 2025-02-11 22:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwopoxjbd2x 2025-02-12 01:10:52+00:00|...

CVE-2025-21322

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbeothr52x 2025-02-11 19:04:16+00:00| seen|...

CVE-2025-21198

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbdxekhb2a 2025-02-11 18:17:03+00:00| seen|...

CVE-2025-24470

creationtimestamp| type| source ---|---|--- 2025-02-11 17:06:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113986344759068128 2025-02-11 17:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5zgrcc52a 2025-02-11 17:45:29+00:00| seen|...

CVE-2024-36508

creationtimestamp| type| source ---|---|--- 2025-02-11 16:36:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113986226670304919 2025-02-11 17:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5y2uyry2d 2025-02-11 17:45:29+00:00| seen|...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/mm/fault: Fixed the reporting of kfence page faults. The copyfromkernelnofault function can be called when reading /proc/kcore. /proc/kcore may contain kfence objects that are not mapped, and reading these objects via...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Make sure the first directory block is not a hole. The syzbot constructs a directory that has no dirblock, but it is not inline; in other words, the first directory block is a hole. No errors are reported when creating file...

CVE-2025-24868

creationtimestamp| type| source ---|---|--- 2025-02-11 01:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuicv755i23 2025-02-11 01:26:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113982647697373406 2025-02-11 03:01:32+00:00| seen|...

Fortinet FortiAnalyzer 信息泄露漏洞

Fortinet FortiAnalyzer is a centralized network security reporting solution from Fiat Fortinet. The product is mainly used to collect network log data and analyze, report, and archive operations on security events, network traffic, and Web content in the logs through the reporting suite. An...

编号撤回

Siemens Opcenter Intelligence is a software from Siemens Germany. It is used to provide flexible reporting and analysis tools that enable companies to present data to the right people with appropriate visualizations. This CVE number has been withdrawn...

编号撤回

Siemens Opcenter Intelligence is a software from Siemens Germany. It is used to provide flexible reporting and analysis tools that enable companies to present data to the right people with appropriate visualizations. This CVE number has been withdrawn...

CVE-2025-25189

creationtimestamp| type| source ---|---|--- 2025-02-10 22:15:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113981896093771933 2025-02-10 22:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhu6ayiqzt2z 2025-02-11 00:14:21+00:00| seen|...

Security update for cloud-regionsrv-client

This update for cloud-regionsrv-client contains the following fixes: Update to 10.3.11 bsc1234050 Send registration code for the extensions, not only base product Update to 10.3.9: bsc1234050 Send registration code for the extensions, not only base product Update to 10.3.8: bsc1233333 Fix the...