IBM DB2 SEoL (9.5.x)

According to its version, IBM DB2 is 9.5.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable,...

CVE-2024-13305

creationtimestamp| type| source ---|---|--- 2025-01-09 20:34:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113800305221049241 2025-01-09 21:16:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyzi4bq2f 2025-01-09 21:38:55+00:00| seen|...

CVE-2024-13272

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinlvndz2f 2025-01-09 21:57:41+00:00| seen| https://t.me/cvedetector/14918...

CVE-2025-21598

creationtimestamp| type| source ---|---|--- 2025-01-09 18:21:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113799784040976407 2025-01-09 19:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfchvtxc2l 2025-01-09 21:06:48+00:00| seen|...

CVE-2025-21599

creationtimestamp| type| source ---|---|--- 2025-01-09 16:48:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113799417683833601 2025-01-09 17:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd6kb3fkl25 2025-01-09 17:21:06+00:00| seen|...

CVE-2023-24010

An attacker can arbitrarily craft malicious DDS Participants or ROS 2 Nodes with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS7 certificate’s validation. This is caused by a...

USN-7185-2 linux-azure, linux-azure-4.15 vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

USN-7195-1: Linux kernel (Azure) vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Several security issues were discover...

CVE-2024-11929

creationtimestamp| type| source ---|---|--- 2025-01-09 11:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgiehnb2a 2025-01-09 11:29:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113798164161224704 2025-01-09 12:16:24+00:00| seen|...

RHSA-2025:0061 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CVE-2025-22445

creationtimestamp| type| source ---|---|--- 2025-01-09 06:57:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113797093464257227 2025-01-09 07:00:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113797106886568510 2025-01-09 07:16:18+00:00| seen|...

CVE-2024-56826

creationtimestamp| type| source ---|---|--- 2025-01-09 03:49:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113796354746932468 2025-01-09 04:14:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/884 2025-01-09 04:15:48+00:00| seen|...

CVE-2024-46464

In PRIMX ZED Enterprise up to 2024.3, technical files stored in local folders with common user access can be manipulated to render the host computer unavailable or to execute programs with an elevation of privilege...

Mozilla Thunderbird ESR < 128.6

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 128.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-05 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5,...

RHEL 8 : webkit2gtk3 (RHSA-2025:0145)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0145 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: WebKitGTK: Processing maliciously...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:0035-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0035-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Security Bulletin: IBM Security QRadar Analyst Workflow for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. The update addresses these issues. Vulnerability Details CVEID:CVE-2024-43796 DESCRIPTION: expressjs express is vulnerable to cross-site scripting, caused by...

CVE-2025-0282

creationtimestamp| type| source ---|---|--- 2025-01-08 17:04:23+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113793817841894943 2025-01-08 17:49:21+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113793994593261539 2025-01-08 17:54:03+00:00| seen|...