Linux Distros Unpatched Vulnerability : CVE-2025-40111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of...

CVE-2025-47913: Undefined Security Weakness

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

CVE-2025-12765: Improper Certificate Validation

pgAdmin = 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification...

CVE-2025-12047

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application...

CVE-2025-12048

An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow remote code execution or unauthorized control of the affected system...

CVE-2025-12048

An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow remote code execution or unauthorized control of the affected system...

CVE-2025-12048

CVE-2025-12048 affects Lenovo Scanner Pro client. The vulnerability is an arbitrary file upload flaw in the client that could lead to remote code execution or unauthorized control of the affected system. The root cause is stated as an arbitrary file upload capability, enabling control if exploite...

CVE-2025-12048

An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow remote code execution or unauthorized control of the affected system...

CVE-2025-12047

Lenovo Scanner Pro is reported to have a vulnerability that, under certain conditions during an internal security assessment, could allow an attacker on the same logical network to disclose sensitive user files from the application. The available documents provide a high-level impact description ...

CVE-2025-12047

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application...

CVE-2025-12047

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application...

Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities

CISA has released Emergency Cisco Directive 25-03 Implementation Guidance to assist federal agencies in addressing critical vulnerabilities in Cisco Adaptive Security Appliances ASA and Firepower devices. Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices, issu...

CVE-2025-11962: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DivvyDrive Information Technologies Inc. Digital Corporate Warehouse allows Stored XSS. This issue affects Digital Corporate Warehouse: before v.4.8.2.22...

PT-2025-46691

Name of the Vulnerable Software and Affected Versions Lenovo Scanner pro affected versions not specified Description An issue was identified in the Lenovo Scanner pro application that, in certain situations, could allow an attacker on the same network to access sensitive user files from the...

PT-2025-46692

Name of the Vulnerable Software and Affected Versions Lenovo Scanner Pro client affected versions not specified Description An arbitrary file upload issue exists in the Lenovo Scanner Pro client. This could allow for remote code execution or unauthorized control of a system. Recommendations At th...

Lenovo Scanner Pro 安全漏洞

Lenovo Scanner Pro is a scanner application from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Scanner Pro, which stems from a vulnerability that could allow an attacker on the same logical network to disclose sensitive user files in the application under certain...

CVE-2025-11366: Improper Limitation of a Pathname to a Restricted Directory

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11565: Improper Limitation of a Pathname to a Restricted Directory

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST /REST/UpdateJRE request payload...

CVE-2025-11700: Improper Restriction of XML External Entity Reference

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

CVE-2025-64293: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through = 4.0.0...