[SECURITY] [DLA 4120-1] libnet-easytcp-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4120-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura April 08, 2025 https://wiki.debian.org/LTS -...

CVE-2025-26654 Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)

SAP Commerce Cloud Public Cloud does not allow to disable unencrypted HTTP port 80 entirely, but instead allows a redirect from port 80 to 443 HTTPS. As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request befor...

Windows Secure Channel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...

Windows Secure Channel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...

CVE-2025-0361

During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API...

Microsoft Windows Secure Channel 资源管理错误漏洞

Microsoft Windows Secure Channel is a Security Support Provider SSP from Microsoft Corporation that contains a set of security protocols that provide authentication and secure, private communications through encryption. A resource management error vulnerability exists in Microsoft Windows Secure...

PT-2025-15365 · Sap · Sap Commerce Cloud

Name of the Vulnerable Software and Affected Versions: SAP Commerce Cloud affected versions not specified Description: The issue affects the confidentiality and integrity of data sent in the first request before a redirect from HTTP to HTTPS. Normally, Commerce communicates securely over HTTPS, b...

Microsoft Windows Secure Channel 资源管理错误漏洞

Microsoft Windows Secure Channel is a security support provider SSP from Microsoft Corporation that contains a set of security protocols that provide authentication and secure, private communications through encryption. A resource management error vulnerability exists in Microsoft Windows Secure...

Microsoft Windows BitLocker 安全漏洞

Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. A security vulnerability exists in Microsoft Windows BitLocker. An attacker exploiting this vulnerability could bypass certain features. The following produc...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly saving host FPSIMD/SVE/SME state, which could lead to a QEMU crash or ptrace ABI change...

PT-2025-15550 · Microsoft · Windows Secure Channel +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Channel affected versions not specified Description: The issue is related to concurrent execution using a shared resource with improper synchronization, also known as a 'race condition', in Windows Secure Channel. This allows a...

Siemens SENTRON 7KT PAC1260 Data Manager 访问控制错误漏洞

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. An Access Control Error vulnerability exists in the Siemens SENTRON 7KT PAC1260 Data Manager, which originates from an unauthenticated SSH service enabled endpoint, and can be...

Siemens SENTRON 7KT PAC1260 Data Manager

SUMMARY SENTRON 7KT PAC1260 Data Manager is affected by multiple vulnerabilities as listed below. Software fixes can no longer be provided for The SENTRON 7KT PAC1260 Data Manager. This advisory documents the known open vulnerabilities. To fix the vulnerabilities, Siemens recommends to replace...

CVE-2024-43046

There may be information disclosure during memory re-allocation in TZ Secure OS...

ABB Arctic Wireless Gateways

SUMMARY ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This could lead to denial of...

CVE-2024-43046

CVE-2024-43046 describes an information disclosure vulnerability affecting TZ Secure OS on Qualcomm chipsets, triggered by memory re-allocation where sensitive memory content may be exposed. The CVE notes a memory re-allocation issue but the provided documents do not specify affected product vers...

CVE-2024-43046 Information Exposure in TZ Secure OS

There may be information disclosure during memory re-allocation in TZ Secure OS...

CVE-2024-43046 Information Exposure in TZ Secure OS

There may be information disclosure during memory re-allocation in TZ Secure OS...

The vulnerability of the tarHandler component in the Grub2 operating system’s downloader allows a hacker to bypass the secure download mechanism.

The vulnerability of the tarHandler component in the Grub2 operating system’s loader involves writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to bypass the secure loading mechanism...

The vulnerability of the UFS file system used by Grub2 for operating system installations allows a hacker to bypass the secure boot mechanism.

The vulnerability of the UFS file system used by Grub2 operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to bypass the secure boot mechanism...