Debian: Security Advisory (DLA-4150-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4150-1] u-boot security update

Debian LTS Advisory DLA-4150-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert May 01, 2025 https://wiki.debian.org/LTS Package : u-boot Version : 2021.01+dfsg-5+deb11u1 CVE ID : CVE-2019-14196 CVE-2022-2347 CVE-2022-30552 CVE-2022-30767 CVE-2022-30790 CVE-2022-331...

DLA-4150-1 u-boot - security update

Bulletin has no description...

Debian dla-4150 : u-boot - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4150 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4150-1 [email protected]...

Security update for u-boot

This update for u-boot fixes the following issues: CVE-2024-57256: Fixed integer overflow in U-Boot's ext4 symlink resolution function bsc1237284 CVE-2024-57258: Fixed multiple integer overflows in U-Boot's memory allocator bsc1237287 Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2025:20219-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2024-57256: Fixed integer overflow in U-Boot's ext4 symlink resolution function bsc1237284 - CVE-2024-57258: Fixed multiple integer overflows in U-Boot's memory allocator bsc1237287...

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

CVE-2024-45712

SolarWinds Serv-U is vulnerable to a client-side cross-site scripting XSS vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low...

Belanjawan Dietiqa 安全漏洞

Belanjawan Dietiqa is a mobile weight loss application from Belanjawan. A security vulnerability exists in Belanjawan Dietiqa version 1.0.20, which stems from improper handling of parameter u in the progress-body-weight.php endpoint, which could lead to SQL injection...

CVE-2024-45712

SolarWinds Serv-U is vulnerable to a client-side cross-site scripting XSS vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low...

CVE-2024-45712

CVE-2024-45712 affects SolarWinds Serv-U. The vulnerability is a client-side cross-site scripting (XSS) issue that can be exploited only by an authenticated user from the local browser session. The documented risk is described as very low. Affected guidance indicates versions prior to 15.5.1 are ...

CVE-2024-45712 SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability

SolarWinds Serv-U is vulnerable to a client-side cross-site scripting XSS vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low...

CVE-2024-45712 SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability

SolarWinds Serv-U is vulnerable to a client-side cross-site scripting XSS vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low...

SolarWinds Serv-U 跨站脚本漏洞

SolarWinds Serv-U is an FTP File Transfer Protocol server software from the US-based SolarWinds Corporation. A cross-site scripting vulnerability exists in SolarWinds Serv-U, which stems from a client-side cross-site scripting vulnerability that could lead to a local attack...

SolarWinds Serv-U 15.0 < 15.5.1 XSS

The version of SolarWinds Serv-U installed on the remote host is prior to 15.5.1. It is, therefore, affected by a vulnerability as referenced in the solarwindsserv-u1551 advisory. - SolarWinds Serv-U is vulnerable to a client-side cross-site scripting XSS vulnerability. The vulnerability can only...

AI Vulnerability Finding

Microsoft is reporting that its AI systems are able to find new vulnerabilities in source code: Microsoft discovered eleven vulnerabilities in GRUB2, including integer and buffer overflows in filesystem parsers, command flaws, and a side-channel in cryptographic comparison. Additionally, 9 buffer...

CVE-2025-3176

A vulnerability was found in Project Worlds Online Lawyer Management System 1.0. It has been classified as critical. This affects an unknown part of the file /singlelawyer.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit...

PT-2025-14628 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Lawyer Management System version 1.0 Description: A critical issue has been found, affecting the /single lawyer.php file. The manipulation of the u id argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-14465 · Undefined · Undefined

Threat Alert: Microsoft Discovers GRUB2, U-Boot, and Barebox Bootloader Flaws with Copilot CVE-2025-26726 CVE-2025-0677 CVE-2025-0678 Severity: 🟡 Medium Maturity: 💢 Emerging Learn more: https://t.co/CXdfA6USas CyberSecurity ThreatIntel InfoSec...

openSUSE Security Advisory (SUSE-SU-2025:0989-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...