CVE-2024-6097: Absolute Path Traversal

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2024-55212

creationtimestamp| type| source ---|---|--- 2025-02-11 21:58:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113987492046596809 2025-02-11 22:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwopoxjbd2x 2025-02-12 01:10:52+00:00|...

CVE-2025-21198

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbdxekhb2a 2025-02-11 18:17:03+00:00| seen|...

CVE-2025-21322

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbeothr52x 2025-02-11 19:04:16+00:00| seen|...

CVE-2025-24470

creationtimestamp| type| source ---|---|--- 2025-02-11 17:06:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113986344759068128 2025-02-11 17:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5zgrcc52a 2025-02-11 17:45:29+00:00| seen|...

CVE-2024-36508

creationtimestamp| type| source ---|---|--- 2025-02-11 16:36:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113986226670304919 2025-02-11 17:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5y2uyry2d 2025-02-11 17:45:29+00:00| seen|...

CVE-2025-24868

creationtimestamp| type| source ---|---|--- 2025-02-11 01:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuicv755i23 2025-02-11 01:26:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113982647697373406 2025-02-11 03:01:32+00:00| seen|...

Fortinet FortiAnalyzer information leakage vulnerability

Fortinet FortiAnalyzer is a centralized network security reporting solution from Fiat Fortinet. The product is mainly used to collect network log data and analyze, report, and archive operations on security events, network traffic, and Web content in the logs through the reporting suite. An...

Number withdrawal

Siemens Opcenter Intelligence is a software from Siemens Germany. It is used to provide flexible reporting and analysis tools that enable companies to present data to the right people with appropriate visualizations. This CVE number has been withdrawn...

Number withdrawal

Siemens Opcenter Intelligence is a software from Siemens Germany. It is used to provide flexible reporting and analysis tools that enable companies to present data to the right people with appropriate visualizations. This CVE number has been withdrawn...

CVE-2025-25189

creationtimestamp| type| source ---|---|--- 2025-02-10 22:15:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113981896093771933 2025-02-10 22:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhu6ayiqzt2z 2025-02-11 00:14:21+00:00| seen|...

Security update for cloud-regionsrv-client

This update for cloud-regionsrv-client contains the following fixes: Update to 10.3.11 bsc1234050 Send registration code for the extensions, not only base product Update to 10.3.9: bsc1234050 Send registration code for the extensions, not only base product Update to 10.3.8: bsc1233333 Fix the...

Azure Linux 3.0 Security Update: cmake / curl / mysql / rust (CVE-2024-9681)

The version of cmake / curl / mysql / rust installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9681 advisory. - When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent...

MAL-2025-191917 Malicious code in updateuuid4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c45f904631a26aae94cafeeac5ea0f7efe0fc5d4f46dea48da17dcb766111d5 The package, with an innocent looking name, has as the only functionality reporting to a Telegram channel given username and password. The functionality is in...

CVE-2025-24371

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...

[SECURITY] Fedora 41 Update: envision-2.0.0-4.20241209git2.0.0.fc41

UI for building, configuring, and running Monado, the open source OpenXR runtime. This is still highly experimental software, while it's unlikely that anything bad will happen, it's still unstable and there is no guarantee that it will work on your system, with your particular hardware. If you...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: tty: Require CAPSYSADMIN for all usages of TIOCLSELMOUSEREPORT This requirement was overeagerly loosened in commit 2f83e38a095f "tty: Permit some TIOCLSETSEL modes without CAPSYSADMIN", but as it turns out, 1 the logic I...

IBM Cloud Pak System Information Disclosure

The vulnerability related to deploying and managing the IBM Cloud Pak System-based cloud enterprise system involves shortcomings in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

IBM Cloud Pak System Information Disclosure

The vulnerability related to deploying and managing the IBM Cloud Pak System-based cloud enterprise system involves shortcomings in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

IBM Control Center Information Disclosure

The vulnerability of the IBM Control Center’s process monitoring and control system is related to deficiencies in the reporting mechanism for error reports. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...