CGA-JV4F-6729-5P92

Bulletin has no description...

Delivering Malware Through Abandoned Amazon S3 Buckets

Here's a supply-chain attack just waiting to happen. A group of researchers searched for, and then registered, abandoned Amazon S3 buckets for about $400. These buckets contained software libraries that are still used. Presumably the projects don't realize that they have been abandoned, and still...

CVE-2020-3432

A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit th...

Intel® Data Streaming Accelerator Advisory

Summary: A potential security vulnerability in the Intel® Data Streaming Accelerator Intel® DSA for some Intel® Xeon® Processors may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-37020 Description:...

Intel Graphics Software February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities Intel has released updates to mitigate the potential...

Intel® QuickAssist Technology Software Advisory

Summary: A potential security vulnerabilities in some Intel® QuickAssist Technology software may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-31858...

KB5052423: Servicing stack update for Windows 10: February 11, 2025

None None...

Intel® Graphics Software Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-37355 Description: Improper access control i...

Intel® VPL Software Advisory

Summary: A potential security vulnerability in some Intel® Video Processing Library VPL software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21830 Description: Uncontrolled search path in...

2025.1 IPU - UEFI Firmware Advisory

Summary: Potential security vulnerabilities in the UEFI firmware for some Intel® Processors may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing UEFI firmware and CPU microcode updates to mitigate these potential vulnerabilities. Vulnerability Detail...

CGA-FJQF-PPMX-7QJ6

Bulletin has no description...

2025.1 IPU - Intel Chipset Firmware Advisory - Lenovo Support US

No description provided...

CGA-7536-745G-7464

Bulletin has no description...

CGA-8H32-8HJ2-4XCJ

Bulletin has no description...

CGA-2VJ4-VFJX-4RR3

Bulletin has no description...

Photon OS 4.0: Gstreamer PHSA-2025-4.0-0744

An update of the gstreamer package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0744. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1140)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bonding: change ipseclock from spin lock to mutexCVE-2024-46678 ice: protect XDP configuration with a mutexCVE-2024-46765 sched/smt: Fix unbalance...

CGA-P72M-XPVJ-6RGJ

Bulletin has no description...

CVE-2021-39185

Http4s is a minimal, idiomatic Scala interface for HTTP services. In http4s versions 0.21.26 and prior, 0.22.0 through 0.22.2, 0.23.0, 0.23.1, and 1.0.0-M1 through 1.0.0-M24, the default CORS configuration is vulnerable to an origin reflection attack. The middleware is also susceptible to a Null...

CVE-2022-36098

XWiki Platform Mentions UI is a user interface for mentioning users in wiki content for XWiki Platform, a generic wiki platform. Starting in version 12.5-rc-1 and prior to versions 13.10.6 and 14.4, it's possible to store Javascript or groovy scripts in a mention, macro anchor, or reference field...