CVE-2025-42915

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks)

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks)

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

CVE-2025-42915

CVE-2025-42915 affects the SAP Fiori app Manage Payment Blocks . The root cause is missing authorization checks, permitting an attacker with basic user privileges to abuse functions restricted to specific user groups. Impact is limited to confidentiality and integrity (no availability impact stat...

PT-2025-36742

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.9 Ivanti Connect Secure versions prior to 22.8R2 Ivanti Policy Secure versions prior to 22.7R1.6 Ivanti ZTA Gateway versions prior to 22.8R2.3-723 Ivanti Neurons for Secure Access versions prior ...

NVIDIA NVDebug 路径遍历漏洞

NVIDIA NVDebug is a debugging and diagnostic tool from NVIDIA Corporation. NVIDIA NVDebug suffers from a path traversal vulnerability that originates from the ability to potentially cause a file to be written to a restricted component, which could lead to information disclosure, denial of service...

VulnCheck KEV: CVE-2025-25231

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests read-only to restricted API endpoints...

Security Bulletin: NVIDIA NVDebug Tool - September 2025

NVIDIA has released a software update for NVIDIA® NVDebug tool to address the security issue that may lead to impacts described below. To protect your system, download and install the latest version of the NVDebug tool from the NVIDIA Developer Tools page. Go to NVIDIA Product Security. Details...

PT-2025-36971

Name of the Vulnerable Software and Affected Versions: NVIDIA NVDebug affected versions not specified Description: The NVIDIA NVDebug tool contains an issue that may allow an actor to write files to restricted components. A successful exploit of this issue may lead to information disclosure, deni...

PT-2025-36548

Name of the Vulnerable Software and Affected Versions: Fiori app Manage Payment Blocks affected versions not specified Description: The Fiori app Manage Payment Blocks does not perform the necessary authorization checks. This allows an attacker with basic user privileges to abuse functionalities...

PT-2025-36818

Name of the Vulnerable Software and Affected Versions: Windows PowerShell affected versions not specified Description: An improper restriction of communication channel to intended endpoints in Windows PowerShell allows a local attacker to elevate privileges. This issue allows attackers to affect...

PT-2025-36751

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.9 Ivanti Connect Secure versions prior to 22.8R2 Ivanti Policy Secure versions prior to 22.7R1.6 Ivanti ZTA Gateway versions prior to 2.8R2.3-723 Ivanti Neurons for Secure Access versions prior t...

PT-2025-36754

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.9 Ivanti Policy Secure versions prior to 22.7R1.6 Ivanti ZTA Gateway versions prior to 2.8R2.3-723 Ivanti Neurons for Secure Access versions prior to 22.8R1.4 Description: The software contains a...

CVE-2025-58835

Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through = 7.6.6...

CVE-2025-25048

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...

SUSE-SU-2025:20670-1 Security update for dpkg

This update for dpkg fixes the following issues: - CVE-2025-6297: Fixed cleanup for control member with restricted directories bsc1245573...

Security update for dpkg

This update for dpkg fixes the following issues: CVE-2025-6297: Fixed cleanup for control member with restricted directories bsc1245573. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can ru...

Eaton NMC G2 安全漏洞

Eaton NMC G2 is a network management card from Eaton Corporation USA. A security vulnerability exists in the Eaton NMC G2 that originates from a privileged attacker being able to modify the contents of non-sensitive files via path traversal in a CLI restricted shell...

CVE-2025-25048

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...

CVE-2025-25048

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...