Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the toolsUploaderHandler function. An attacker can execute arbitrary code and compromise the integrity, confidentiality, and availability of the system by uploading malicious binaries through an authenticated...

Important: Red Hat Security Advisory: Kiali 2.4.7 for Red Hat OpenShift Service Mesh 3.0

Kiali 2.4.7 for Red Hat OpenShift Service Mesh 3.0 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section Kiali 2.4.7, for Red H...

PT-2025-28963 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: Kaseya Rapid Fire Tools Network Detective versions through 2.0.16.0 Description: A cryptographic implementation flaw exists in the password encryption mechanism within the EncryptionUtil class. Symmetric encryption is implemented in a...

PT-2025-28925 · Jenkins · Jenkins Sensedia Api Platform Tools Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Sensedia Api Platform Tools Plugin version 1.0 Description: The Jenkins Sensedia Api Platform Tools Plugin stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller. This...

Jenkins plugin Sensedia Api Platform tools 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

PT-2025-28962 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: Kaseya Rapid Fire Tools Network Detective version 2.0.16.0 Description: Kaseya Rapid Fire Tools Network Detective stores unencrypted credentials for privileged access in the collector.txt configuration file. Recommendations: Ensure the...

avif-tools-1.3.0-2.1 on GA media (moderate)

avif-tools-1.3.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15320-1 Rating: moderate Cross-References: CVE-2025-48174 CVSS scores: CVE-2025-48174 SUSE : 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L CVE-2025-48174 SUSE : 7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:15332-1 avif-tools-1.3.0-3.1 on GA media

These are all security issues fixed in the avif-tools-1.3.0-3.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 8 : container-tools:rhel8 (ELSA-2025-10551)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10551 advisory. - fixes 'CVE-2025-6032 container-tools:rhel8/podman: podman missing TLS verification rhel-8.10.z' Tenable has extracted the preceding description block directl...

GHSA-GJV4-GHM7-Q58Q MCP Server Kubernetes vulnerable to command injection in several tools

Summary A command injection vulnerability exists in the mcp-server-kubernetes MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to...

Malicious code in graphprotocol-tools-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2da3e0dc947efefeb72ffd27d949465798a6e39af182b4634c40e9dc4bed764 Any computer that has this package installed or running should be considered...

MAL-2025-5814 Malicious code in graphprotocol-tools-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2da3e0dc947efefeb72ffd27d949465798a6e39af182b4634c40e9dc4bed764 Any computer that has this package installed or running should be considered...

RHSA-2025:10551 Red Hat Security Advisory: container-tools:rhel8 security update

Bulletin has no description...

Important: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2025-42960 Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools

SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than intended by exploiting improper authorization checks. This could potentially impact data integrity by allowing deletion of user table entries.�It has no impact on the confidentialit...

OPENSUSE-SU-2025:15320-1 avif-tools-1.3.0-2.1 on GA media

These are all security issues fixed in the avif-tools-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : container-tools:rhel8 (RHSA-2025:10551)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:10551 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: podman: podman...

The vulnerability of PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the use of memory after it is freed during file processing for U3D operations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

SAP Business Warehouse和SAP BW/4HANA BEx Tools 安全漏洞

SAP Business Warehouse and SAP BW/4HANA BEx Tools are both products of SAP, a German company.SAP Business Warehouse is a key component for executing business processes that allows users to design, implement, and manage business processes, ensure process compliance, and reduce the need for manual...