SUSE SLES15 Security Update : kernel RT (Live Patch 2 for SLE 15 SP6) (SUSE-SU-2025:0426-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0426-1 advisory. This update for the Linux Kernel 6.4.0-150600108 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix...

SUSE SLES12: kernel-livepatch-5_3_18-150300_59_179-default / etc (SUSE-SU-2025:0452-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0452-1 advisory. This update for the Linux Kernel 4.12.14-122222 fixes several issues. The following security issues were fixed: - CVE-2024-45016: nete...

WebSocket Unencrypted Traffic

WebSocket is a protocol used by modern web application to allow full duplex communication between clients and servers for real-time web applications. By default, WebSocket protocol does not use any encryption when using the base ws:// URL scheme, leaving it open to man-in-the-middle attacks. No...

SUSE SLES15 Security Update : kernel (Live Patch 44 for SLE 15 SP3) (SUSE-SU-2025:0449-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0449-1 advisory. This update for the Linux Kernel 5.3.18-15030059161 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fi...

Multi-Vendor BIOS Security Vulnerabilities (February 2025) - Lenovo Support US

No description provided...

2025-02 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5051974)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

CVE-2025-21198 Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

...

CVE-2024-27780

Fortinet FortiSIEM is affected by a cross-site scripting vulnerability (CWE-79) in the incident page due to improper neutralization of input. Affected products: FortiSIEM versions 6.7 through 7.1. An authenticated attacker could trigger the XSS via crafted HTTP requests. There is no public detail...

Security Advisory Ivanti Cloud Services Application (CSA) (CVE-2024-47908, CVE-2024-11771)

Summary Ivanti has released updates for Ivanti Cloud Services Application CSA which addresses critical and medium severity vulnerabilities. Successful exploitation of CVE-2024-47908 could allow a remote authenticated attacker to achieve remote code execution and CVE-2024-11771 could allow a remot...

RHSA-2025:1250 Red Hat Security Advisory: python-jinja2 security update

Bulletin has no description...

Security Bulletin: Multiple vulnerabilities have been identified in IBM Installation Manager shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2021-34428, CVE-2022-2047, CVE-2023-36479)

Summary IBM Installation Manager is shipped as a package manager for IBM Security Guardium Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Installation Manager has been published in a security bulletin. Vulnerability Details Refer to the security...

RHEL 8 : gcc (RHSA-2025:1301)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1301 advisory. The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes:...

Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor

SUMMARY SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products where fixes are not, or not...

Intel Graphics Software February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities Intel has released updates to mitigate the potential...

KB5051987: Windows 11 Version 24H2 / Windows Server 2025 Security Update (February 2025)

The remote Windows host is missing security update 5051987 or hotpatch 5052105. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2025-21208, CVE-2025-21410 - Windows Telephony Service Remote Code...

Security Bulletin: NVIDIA Container Toolkit - 11 February 2025

NVIDIA has released a software update for NVIDIA® Container Toolkit and NVIDIA GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product...

Intel® Ethernet Adapter Complete Driver Pack Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Adapter Complete Driver Pack may allow escalation of privilege or denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-24852 Description: Uncontrolled...

Intel® Server Board BMC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Server Board BMC Firmware may allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25191Non-Int...

AMD GPU Security Vulnerabilities

AMD ID: AMD-SB-6016 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential security vulnerabilities in the Satellite Management Controller SMC in AMD Instinct™ MI300X accelerators were discovered during internal audit/penetration...

Siemens SIPROTEC 5

SUMMARY Affected SIPROTEC 5 devices contain a development shell which is accessible via a physical interface which is not properly restricted. This could allow an unauthenticated attacker with physical access to an affected device to execute arbitrary commands on the device. Siemens has released...