CVE-2024-13980

H3C Intelligent Management Center IMC versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters,...

Protect Critical Infrastructure: Cybersecurity Strategies for Governments

Learn actionable strategies that can help state and local governments protect critical infrastructure and dramatically reduce risk exposure...

CISA and Partners Release Joint Advisory on Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage Systems

CISA, along with the National Security Agency, Federal Bureau of Investigation, and international partners, released a joint Cybersecurity Advisory on People’s Republic of China PRC state-sponsored Advanced Persistent Threat APT actors targeting critical infrastructure across sectors and continen...

Linux Distros Unpatched Vulnerability : CVE-2019-7352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'state' aka Run State state.php does no input validation to the value...

Linux Distros Unpatched Vulnerability : CVE-2022-22637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS...

Linux Distros Unpatched Vulnerability : CVE-2023-1297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could...

CVE-2025-0092

In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-0093

In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-0093

Google Android is affected by an information disclosure vulnerability (CVE-2025-0093) caused by a missing permission check in the handleBondStateChanged function of AdapterService.java. An attacker can exploit this flaw to obtain sensitive information without requiring additional execution privil...

CVE-2025-0093

In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-0092

In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-0092

A permission bypass exists in the handleBondStateChanged function of AdapterService.java within the Android Framework (System component). This flaw is caused by misleading or insufficient UI and can lead to remote (proximal/adjacent) information disclosure without requiring additional execution p...

Linux Distros Unpatched Vulnerability : CVE-2024-21853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially...

Linux Distros Unpatched Vulnerability : CVE-2020-35680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daem...

Linux Distros Unpatched Vulnerability : CVE-2024-43420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel AtomR processors may...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.48.5: CVE-2025-31273: Fixed processing maliciously crafted web content leading to memory corruption bsc1247564 CVE-2025-43265: Fixed processing maliciously crafted web content disclosing internal states of the app...

SUSE-SU-2025:02973-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.5: + CVE-2025-31273: Fixed processing maliciously crafted web content leading to memory corruption bsc1247564 + CVE-2025-43265: Fixed processing maliciously crafted web content disclosing internal states of the app...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...