CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

CVE-2024-32009

Summary: CVE-2024-32009 affects Siemens Spectrum Power 4 (all versions

EUVD-2017-14759

Malware in sbrugna...

EUVD-2022-38013

Malicious code in bioql PyPI...

CVE-2025-59145 [email protected] contains malware after npm account takeover

color-name is a JSON with CSS color names. On 8 September 2025, an npm publishing account for color-name was taken over after a phishing attack. Version 2.0.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrenc...

KB4482960 - Cumulative Update 2 for SQL Server 2014 SP3

KB4482960 - Cumulative Update 2 for SQL Server 2014 SP3 Applies To SQL Server 2014 Developer SQL Server 2014 Enterprise SQL Server 2014 Enterprise Core SQL Server 2014 Web SQL Server 2014 Express SQL Server 2014 Business Intelligence SQL Server 2014 Standard This article describes Cumulative Upda...

KB4052574 - Cumulative Update 2 for SQL Server 2017

KB4052574 - Cumulative Update 2 for SQL Server 2017 Release Date: November 28, 2017 Version: 14.0.3008.27 Summary This article describes Cumulative Update package 2 CU2 for Microsoft SQL Server 2017. This update contains 34 fixes that were issued after the release of SQL Server 2017 Cumulative...

KB4536075 - Cumulative Update 2 for SQL Server 2019

KB4536075 - Cumulative Update 2 for SQL Server 2019 Release Date: February 13, 2020 Version: 15.0.4013.40 Summary This article describes Cumulative Update package 2 CU2 for Microsoft SQL Server 2019. This update contains 81 fixes that were issued after the release of SQL Server 2019 Cumulative...

CVE-2023-5445

An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting URL requests to a malicious site. This impacts the dashboard area of the user interface. A user would need to be logg...

CVE-2023-3505: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Onest CRM 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/project/update/2 of the component Project List Handler. The manipulation of the argument name with the input leads to cross site scripting. It is possible to initiate...

Virtuozzo Hybrid Infrastructure 5.4 Update 2 Hotfix 1 (5.4.2-66)

This update provides important improvements for the core storage and compute services. Vulnerability id: VSTOR-69329 The compute networking service may get stuck after an update to version 5.4 Update 2. Vulnerability id: VSTOR-66925, VSTOR-68759, VSTOR-69819 Important stability improvements...

Virtuozzo PowerPanel Update 2 Hotfix 1 (7.0.4-77)

The update for Virtuozzo PowerPanel introduces stability fixes. Vulnerability id: PP-746 Controller installation may fail with a credentials-related error...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

Virtuozzo Hybrid Server 7.5 Update 2 Hotfix 1 (7.5.2-444)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 2 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-134035 libvirtd could stop responding during VM autostart after node reboot. Vulnerability id: PSBM-134221 virtio-scsi could abort inside a guest during...

CVE-2021-39831

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu...

CVE-2021-39865

Adobe FrameMaker is affected by CVE-2021-39865 (TIF File Parsing Out-Of-Bounds Read Information Disclosure). The vulnerability allows memory disclosure via crafted TIF parsing and requires user interaction (victim opens a malicious file). Connected advisories (APSB21-74, APSB22-27, APSB22-42) ind...

CVE-2021-39832

CVE-2021-39832 affects Adobe FrameMaker 2019 Update 8 and earlier and 2020 Release Update 2 and earlier. The vulnerability is a memory corruption issue triggered by processing a malicious PDF file, enabling arbitrary code execution in the user’s context when opened (requires user interaction). Se...

Adobe ColdFusion 2018.x < 2018 Update 12 / 2021.x < 2021 Update 2 Multiple Vulnerabilities (APSB21-75)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 12 or 2021.x update 2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-75 advisory including the following: - A vulnerability exists in Adobe Coldfusion due to the usa...

Adobe Framemaker out-of-bounds read vulnerability

Adobe FrameMaker is a document processing program used to write and edit large or complex documents, including structured documents.An out-of-bounds read vulnerability exists in Adobe Framemaker 2019 Update 8, 2020 Release Update 2 and earlier versions. An attacker could exploit this vulnerabilit...