40356 matches found
Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways
Updated April 8, 2025 CISA updated these mitigations based on identification of a new malware variant called RESURGE that could undermine the effectiveness of the mitigations previously provided. For more information on RESURGE, see MAR-25993211.R1.V1.CLEAR and CISA Releases Malware Analysis Repo...
Google fixes two actively exploited zero-day vulnerabilities in Android
Google has patched 62 vulnerabilities in Android, including two actively exploited zero-days in its April 2025 Android Security Bulletin. When we say "zero-day" we mean an exploitable software vulnerability for which there was no patch at the time of the vulnerability being exploited or published...
RHSA-2025:3635 Red Hat Security Advisory: Red Hat Ceph Storage 8.0 security, bug fix, and enhancement updates
Bulletin has no description...
April 8, 2025—KB5055519 (OS Build 17763.7136) - EXPIRED
None None...
April 8, 2025—KB5055581 (Monthly Rollup)
None None...
KB5055515: Cumulative security update for Internet Explorer: April 8, 2025
None None...
April 8, 2025—KB5055518 (OS Builds 19044.5737 and 19045.5737) - EXPIRED
None None...
April 8, 2025—KB5055528 (OS Builds 22621.5189 and 22631.5189)
None None...
April 8, 2025—KB5055527 (OS Build 25398.1551)
None None...
April 8, 2025—KB5055596 (Security-only update)
None None...
CVE-2025-20946
creationtimestamp| type| source ---|---|--- 2025-04-08 05:47:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10853 2025-04-08 07:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114301239272400759 2025-04-08 08:06:58+00:00| seen|...
CVE-2024-58133
In chainmaker-go aka ChainMaker before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic...
CVE-2025-26682
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
PT-2025-15570 · Microsoft · Office Word +1
Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft Office Word, which can be exploited by an...
openSUSE 15 Security Update : chromium, gn (openSUSE-SU-2025:0115-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0115-1 advisory. Changes in chromium: - Chromium 135.0.7049.52 stable release 2025-04-01 boo1240555 CVE-2025-3066: Use after free in Navigations CVE-2025-3067:...
PT-2025-15423 · Shopware · Shopware
Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.6.10.3 Shopware versions prior to 6.5.8.17 Description: The issue allows an attacker to cause a Denial of Service by passing long passwords via forms in Storefront forms or Store-API. Recommendations: For versions...
Siemens Industrial Edge Devices
SUMMARY Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to...
APSB25-15 : Security update available for Adobe ColdFusion
Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolve critical and important vulnerabilities that could lead to arbitrary file system read, arbitrary code execution and security feature bypass...