Mozilla Thunderbird ESR < 128.6

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 128.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-05 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5,...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:0035-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0035-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

RHEL 8 : webkit2gtk3 (RHSA-2025:0145)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0145 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: WebKitGTK: Processing maliciously...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Security Bulletin: IBM Security QRadar Analyst Workflow for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. The update addresses these issues. Vulnerability Details CVEID:CVE-2024-43796 DESCRIPTION: expressjs express is vulnerable to cross-site scripting, caused by...

CVE-2025-0282

creationtimestamp| type| source ---|---|--- 2025-01-08 17:04:23+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113793817841894943 2025-01-08 17:49:21+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113793994593261539 2025-01-08 17:54:03+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.5 Bug Fix Update

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.16.5 on Red Hat Enterprise Linux 9 from Red Hat Container Registry. Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation...

CVE-2024-12851

creationtimestamp| type| source ---|---|--- 2025-01-08 06:43:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113791376037522876 2025-01-08 06:47:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113791390802796847 2025-01-08 07:15:52+00:00| seen|...

firefox-esr-128.6.0-1.1 on GA media (moderate)

firefox-esr-128.6.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14619-1 Rating: moderate Cross-References: CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241 CVE-2025-0242 CVE-2025-0243 Affected Products: openSUSE Tumbleweed An update that solves 7 vulnerabilities can now...

PT-2025-3191 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a template misconfiguration that causes security vulnerabilities. Recommendations: At the moment, there is no information about a newer version that contains a f...

CVE-2024-55218

creationtimestamp| type| source ---|---|--- 2025-01-07 19:57:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113788836453836260 2025-01-07 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6hozzsjx2e 2025-01-07 20:39:25+00:00|...

CVE-2024-55412

creationtimestamp| type| source ---|---|--- 2025-01-07 17:30:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113788257000935649 2025-01-07 17:39:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/481 2025-01-07 18:16:07+00:00| seen|...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on January 7, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-007-01 ABB ASPECT-Enterprise, NEXUS, and MATRIX Series Products ICSA-25-007-02 Nedap...

CVE-2025-22364

creationtimestamp| type| source ---|---|--- 2025-01-07 11:18:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jobu4tc2o 2025-01-07 11:18:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jobu4tc2o 2025-01-07 11:48:29+00:00| seen|...

CVE-2025-22316

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jmgx33b2k 2025-01-07 11:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jmgx33b2k 2025-01-07 14:10:23+00:00| seen|...

CVE-2024-12126

creationtimestamp| type| source ---|---|--- 2025-01-07 05:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vg2r2hk2k 2025-01-07 16:40:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/461...

CVE-2024-12419

creationtimestamp| type| source ---|---|--- 2025-01-07 03:36:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/290 2025-01-07 03:58:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113785064242184668 2025-01-07 04:15:44+00:00| seen|...

Security Vulnerabilities fixed in Firefox 134 — Mozilla

In resizeToAtLeast of SkRegion.cpp, there was a possible out of bounds write due to an integer overflow When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Under...

Security Vulnerabilities fixed in Thunderbird 134 — Mozilla

The Matrix specification demands homeservers to perform validation of the server-name and media-id components of MXC URIs with the intent to prevent path traversal. However, it is not mentioned that a similar check must also be performed on the client to prevent client-side path traversal...