40243 matches found
August 12, 2025—KB5063950 (Monthly Rollup)
None None...
Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability
On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identifi...
Security Updates for Microsoft Office Products (August 2025) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-12-2025 advisory. - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2025-53738, CVE-2025-53784 - Use after...
Linux Distros Unpatched Vulnerability : CVE-2023-29532
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB...
Intel® oneAPI Toolkit Software Advisory
Summary: Potential security vulnerabilities in some Intel® oneAPI Toolkit software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20087 Description: Incorrect default permissions for some...
2025.2 IPU, Intel® Processor Stream Cache Advisory
Summary: A potential security vulnerability in some Intel® Processor stream cache mechanisms may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20109 Description: Improper Isolation or...
Siemens SICAM Q100/Q200
SUMMARY SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new versions for the affected...
PT-2025-32870
Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 6.4.0 through 6.4.15 and versions prior to 6.2.16 Fortinet FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8 and versions prior to 7.0.15 Fortinet FortiPAM versions prior to 1.2.0 Description: An...
Security Updates for Microsoft Exchange Server (August 2025)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the August, 2025 security bulletin. - Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an...
2025.3 IPU, Intel® Chipset Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services Intel® SPS, Intel® Active Management Technology AMT, and Intel® Standard Manageability may allow information disclosure or escalation of privilege. Intel is...
Intel® PROSet/Wireless WiFi Software Advisory
Summary: A potential security vulnerability for some Intel® PROSet/Wireless WiFi Software for Windows may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20625 Description: Improper conditions check for...
Intel® Graphics Advisory
Summary: Potential security vulnerabilities for some Intel® Graphics software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20023 Description: Incorrect default...
Zoom Workplace VDI < 6.3.12 Vulnerability (ZSB-25029)
The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.12. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...
Security Updates for Microsoft Office Products (August 2025)
The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities. - A Remote Code Execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-53731, CVE-2025-53740 Note th...
Security Updates for Microsoft SharePoint Server Subscription Edition (August 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by an privilege escalation Vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Security Updates for Microsoft Word Products (August 2025)
The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-53733, CVE-2025-53738 - An...
Intel® Trace Analyzer and Collector Software Advisory
Summary: A potential security vulnerability in Intel® Trace Analyzer and Collector software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® Trace Analyzer and Collector software...
Edge Orchestrator for Intel® Tiber™ Edge Platform Security Advisory
Summary: Potential security vulnerabilities in some Edge Orchestrator software for Intel® Tiber™ Edge Platform may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details:...
PT-2025-32652 · Siemens · Sinumerik 828D Ppu.4 +6
Name of the Vulnerable Software and Affected Versions: SINUMERIK 828D PPU.4 versions prior to V4.95 SP5 SINUMERIK 828D PPU.5 versions prior to V5.25 SP1 SINUMERIK 840D sl versions prior to V4.95 SP5 SINUMERIK MC versions prior to V1.25 SP1 SINUMERIK MC V1.15 versions prior to V1.15 SP5 SINUMERIK...
Siemens Engineering Platforms
SUMMARY Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the...