12576 matches found
Siemens SIMATIC RTLS Locating Manager
SUMMARY Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate...
PT-2025-32737 · Unknown · Edge Orchestrator
Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: Improper neutralization in some Edge Orchestrator software may allow an unauthenticated user to potentially enable information disclosure via adjacent access. Recommendations: Update Ed...
PT-2025-32924 · Adobe · Indesign Desktop
Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 and earlier, are affected by an Access of Uninitialized Pointer issue. Successf...
Security Bulletin: NVIDIA Apex - August 2025
NVIDIA has released a software update for NVIDIA Apex. To protect your system, install the software including the Github release 25.07 of NVIDIA Apex. Go to NVIDIA Product Security...
Intel PROSet/Wireless WiFi Software August 2025 Security Update
Intel has informed HP of a potential security vulnerability for some Intel® PROSet/Wireless WiFi Software for Windows, which might allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential...
Security Bulletin: NVIDIA Merlin Transformers4Rec - August 2025
NVIDIA has released a software update for NVIDIA Merlin Transformers4Rec. To protect your system, install the software including the Github commit b7eaea5 of NVIDIA Merlin Transformers4Rec. Go to NVIDIA Product Security...
MINI-9X2V-XFF8-RH8R
Bulletin has no description...
JVN#21048820: WordPress plugin "Advanced Custom Fields" vulnerable to HTML injection
Advanced Custom Fields provided by WPEngine, Inc. contains the following vulnerability. HTML injection CWE-94 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N Base Score 4.6 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N Base Score 3.4 CVE-2025-54940 Impact Crafted HTML code may be...
RHSA-2025:13311 Red Hat Security Advisory: libxml2 security update
Bulletin has no description...
RHSA-2025:13309 Red Hat Security Advisory: libxml2 security update
Bulletin has no description...
RHSA-2025:13310 Red Hat Security Advisory: libxml2 security update
Bulletin has no description...
RHSA-2025:13307 Red Hat Security Advisory: pcs security update
Bulletin has no description...
RHSA-2025:13308 Red Hat Security Advisory: libxml2 security update
Bulletin has no description...
Security Bulletin: Vulnerabilities in axios affects IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Potential vulnerability in axios has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios...
PT-2025-32243 · Tagfree · Tagfree X-Free Uploader Xfu
Name of the Vulnerable Software and Affected Versions: TAGFREE X-Free Uploader XFU versions 1.0.1.0084 through 1.0.1.0085 TAGFREE X-Free Uploader XFU versions 2.0.1.0034 through 2.0.1.0035 Description: The software contains a Path Traversal flaw that allows unauthorized access. The issue is due t...
Security Bulletin: Cross Site Scripting vulnerabiliies may affect IBM Business Automation Workflow - CVE-2024-47875, CVE-2024-48910
Summary IBM Business Automation Workflow packages a vulnerable copy of DOMPurify. Vulnerability Details CVEID:CVE-2024-47875 DESCRIPTION: DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability i...
Security Bulletin: Vulnerabilities in Netty affects IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is ...
GHSA-7RX2-769V-HRWF HashiCorp Vault ldap auth method may not have correctly enforced MFA
Vault and Vault Enterprise’s “Vault” ldap auth method may not have correctly enforced MFA if usernameasalias was set to true and a user had multiple CNs that are equal but with leading or trailing spaces. Fixed in Vault Community Edition 1.20.2 and Vault Enterprise 1.20.2, 1.19.8, 1.18.13, and...