KB5052109: Servicing stack update for Windows Server 2012: February 11, 2025

None None...

KB5052108: Servicing stack update for Windows Server 2012 R2: February 11, 2025

None None...

Intel CPUs -- multiple vulnerabilities

Intel reports: A potential security vulnerability in some Intel Processors may allow denial of service. Intel released microcode updates to mitigate this potential vulnerability. A potential security vulnerability in some Intel Software Guard Extensions Intel SGX Platforms may allow denial of...

Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal

SUMMARY Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released new versions for several...

Siemens SIPROTEC 5

SUMMARY Affected SIPROTEC 5 devices do not encrypt certain data within the on-board flash storage on their PCB. This could allow an attacker with physical access to read the sensitive information from the filesystem of the device. Siemens is preparing fix versions and recommends specific...

Intel® Data Streaming Accelerator Advisory

Summary: A potential security vulnerability in the Intel® Data Streaming Accelerator Intel® DSA for some Intel® Xeon® Processors may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-37020 Description:...

Intel® System Security Report and System Resources Defense Advisory

Summary: Potential security vulnerabilities in some Intel® System Security Report and System Resource Defense PPAM firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

Intel® SPS Firmware Advisory

Summary: A potential security vulnerability in some Intel® Server Platform Services Intel® SPS firmware may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-25571 Description: Improper input validation in...

Intel 2024.4 IPU - Processor February 2025 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified affected...

Intel Graphics Software February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities Intel has released updates to mitigate the potential...

AMD Client Processors February 2025 Security Update

AMD has informed HP of potential vulnerabilities in platform components for some AMD Client Processors, which might allow arbitrary code execution, loss of integrity, loss of confidentiality, or loss of availability. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has...

thunderbird security update

128.7.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.7.0 - Add OpenELA debranding 128.7.0-1 - Update to 128.2.0 build1...

Azure Linux 3.0 Security Update: avahi (CVE-2023-38472)

The version of avahi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38472 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the avahirdataparse function...

Security Updates for Microsoft Office Products (February 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2025-21383 - A remote code execution vulnerability. An...

Security Updates for Microsoft Excel Products (February 2025)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

Siemens SIPROTEC 5 Devices

SUMMARY An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is...

Intel® 800 Series Ethernet Driver Software

Summary: Potential security vulnerability in Intel® 800 Series Ethernet Driver software may allow informational disclosure. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39286 Description: Incorrect execution-assigned permissions in th...

2024.4 IPU, Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-31068 Description: Improper Finite State Machines FSMs in Hardware Logic for som...

Important Photon OS Security Update - PHSA-2025-4.0-0753

Updates of 'linux' packages of Photon OS have been released...

Intel® PROSet/Wireless WiFi and Killer™ WiFi Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Killer™ WiFi software products may allow information disclosure or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...