CISA: 2021 ISC Annual Review

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Security Bulletin: Multiple Security vulnerablilites affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple security vulnerabilities affect IBM Robotic Process Automation for Cloud Pak. RedHat UBI is used as base imaged for IBM Robotic Process Automation for Cloud Pak images. Python is included in some container base images for IBM Robotic Process Automation for Cloud Pak. This bulleti...

CVE-2025-0392

creationtimestamp| type| source ---|---|--- 2025-01-11 11:03:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113809386627182709 2025-01-11 11:03:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1293 2025-01-11 11:15:24+00:00| seen|...

CVE-2024-42175

CVE-2024-42175 affects HCL DRYiCE MyXalytics (HCL MyXalytics) with weak input validation. The vulnerability arises from the application accepting special characters and lacking length validation in inputs, leading to potential issues such as SQL injection, XSS, and buffer overflow as described in...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

DLA-4012-1 thunderbird - security update

Bulletin has no description...

CVE-2025-23113

creationtimestamp| type| source ---|---|--- 2025-01-10 22:04:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1249 2025-01-10 22:16:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113806369662260579 2025-01-10 22:16:30+00:00| seen|...

CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

MGASA-2025-0003 Updated tinyproxy packages fix security vulnerabilities

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function.. CVE-2022-40468 A use-after-free vulnerability exists in the HTTP Connection Headers...

USN-7169-5: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ext4 file system; - Network traffic control; - VMware vSockets driver; CVE-2024-49967, CVE-2024-53057, CVE-2024-502...

GHSA-9X2J-PW3H-P53F

creationtimestamp| type| source ---|---|--- 2025-01-10 15:32:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113804779630653898 2025-01-10 15:35:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113804792818857490...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on January 10, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-010-01 Schneider Electric PowerChute Serial Shutdown ICSA-25-010-02 Schneider Electri...

Mozilla Firefox SEoL (2.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

Mozilla Firefox ESR SEoL (128.x)

According to its version, Mozilla Firefox ESR version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may...

Wireshark SEoL (2.4.x)

According to its version, Wireshark is 2.4.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable,...

Mozilla Thunderbird SEoL (3.x)

According to its version, Mozilla Thunderbird version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may...

DLA-4010-1 python-django - security update

Bulletin has no description...

Mozilla Firefox SEoL (26.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

Mozilla Thunderbird SEoL (6.x)

According to its version, Mozilla Thunderbird version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may...

Mozilla Firefox SEoL (132.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...