26360 matches found
Security Bulletin: Vulnerabilities in Linux Kernel, MongoDB, Python, Samba, OpenSSL and cURL libcurl affect IBM Spectrum Protect Plus
Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in libcurl, MongoDB, Python, Samba, OpenSSL and Linux. Vulnerabilities include obtaining sensitive information, causing a denial of service condition, the elevation of privileges, remote execution of arbitrary code and bypassing...
libxslt -- multiple vulnerabilities
Alan Coopersmith reports: On 6/16/25 15:12, Alan Coopersmith wrote: BTW, users of libxml2 may also be using its sibling project, libxslt, which currently has no active maintainer, but has three unfixed security issues reported against it according to...
Autodesk Navisworks Manage 25.0.x < 2025.5 Multiple Vulnerabilities (adsk-sa-2025-0002)
The version of Autodesk Navisworks Manage installed on the remote host is 2025.0 prior to 2025.5. It is, therefore, affected by multiple vulnerabilities as referenced in the adsk-sa-2025-0002 advisory. - A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an...
Ubuntu: Security Advisory (USN-7429-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] python3
New python3 packages are available for Slackware 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.22-i586-1slack15.0.txz: Upgraded. This update fixes security issues: gh-131809 and gh-131261: Upgrade vendored expat to 2.7.1...
USN-7429-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Drivers core; - HID subsystem; - Network drivers; - SCSI subsystem; - SuperH / SH-Mobile drivers; - File systems...
CVE-2025-3114
creationtimestamp| type| source ---|---|--- 2025-04-09 17:47:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11127 2025-04-09 18:02:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309318425843110 2025-04-09 20:57:10+00:00| seen|...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.7.
Summary In addition to updates of open source dependencies, the following security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.7. Vulnerability Details CVEID:CVE-2024-7254 DESCRIPTION: Any project that parses untrusted Protocol Buffers data containing an...
CVE-2025-0122
creationtimestamp| type| source ---|---|--- 2025-04-09 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0122 2025-04-11 05:34:36+00:00| seen| https://t.me/cvedetector/22696 2025-04-11 13:55:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114319669075311241...
CVE-2025-0125
creationtimestamp| type| source ---|---|--- 2025-04-09 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0125 2025-04-11 05:34:38+00:00| seen| https://t.me/cvedetector/22698 2025-04-11 13:55:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114319669075311241...
CVE-2025-2223
creationtimestamp| type| source ---|---|--- 2025-04-09 10:47:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11040 2025-04-09 14:15:53+00:00| seen| https://t.me/cvedetector/22553 2025-04-17 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-03...
Ubuntu: Security Advisory (USN-7423-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MozillaFirefox-137.0-1.1 on GA media (moderate)
MozillaFirefox-137.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14971-1 Rating: moderate Cross-References: CVE-2025-3028 CVE-2025-3029 CVE-2025-3030 CVE-2025-3031 CVE-2025-3032 CVE-2025-3033 CVE-2025-3034 CVE-2025-3035 CVSS scores: CVE-2025-3028 SUSE : 6.5...
SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2025:1177-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1177-1 advisory. The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following securit...
Microsoft Word 2016 Multiple Vulnerabilities (KB5002702)
This host is missing an important security update according to Microsoft KB5002702 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Important: Red Hat Security Advisory: updated discovery container images
Updated container images are now available for Discovery 1.13.1. The Discovery container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog see...
CVE-2025-277477
creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...
CVE-2025-27085 Arbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device...
CVE-2025-27085 Arbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device...
