Security Bulletin: Vulnerability in pypa/setuptools affects watsonx.data

Summary pypa/setuptools is vulnerable to arbitrary code execution attacks, which could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: pypa/setuptools could allow a remote attacker to execute arbitrary code on the system, caused by an error in the packageindex module. ...

RHSA-2025:0878 Red Hat Security Advisory: OpenShift Container Platform 4.17.15 packages and security update

Bulletin has no description...

CVE-2025-25117

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleog7dgw26 2025-02-07 12:00:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113962493500243898...

Exciting updates to the Copilot (AI) Bounty Program: Enhancing security and incentivizing innovation

At Microsoft, we are committed to fostering a secure and innovative environment for our customers and users. As part of this commitment, we are thrilled to announce significant updates to our Copilot AI Bounty Program. These changes are designed to enhance the program's effectiveness, incentivize...

Vulnerabilities fixed in Cisco Identity Services Engine

Cisco has fixed vulnerabilities in Cisco Identity Services Engine ISE. The vulnerabilities are in the API of Cisco ISE, which allows an authenticated remote malicious person to execute arbitrary commands as the root user through insecure deserialization of Java byte streams. All of these...

Vulnerabilities fixed in Cisco AsyncOS Software

Cisco has fixed vulnerabilities in Cisco AsyncOS Software Specific to Cisco Secure Web Appliance and Cisco Secure Email Gateway. The vulnerabilities are in the way Cisco AsyncOS Software handles requests and configuration files. An attacker can gain unauthenticated access to the system by using...

CVE-2024-13352

creationtimestamp| type| source ---|---|--- 2025-02-07 06:12:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113961122645272686 2025-02-07 06:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkxavpowy26 2025-02-07 07:57:37+00:00| seen|...

CVE-2025-1072

creationtimestamp| type| source ---|---|--- 2025-02-07 04:10:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113960644266809055 2025-02-07 04:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkqicnisu2s 2025-02-07 07:57:37+00:00| seen|...

Fedora 40 : FlightGear / SimGear (2025-725bba93b2)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-725bba93b2 advisory. Fix CVE-2025-0781 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 40 : java-latest-openjdk (2025-d2f32b0607)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d2f32b0607 advisory. January CPU 2025 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2025-21404

creationtimestamp| type| source ---|---|--- 2025-02-06 22:58:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113959418345354392 2025-02-06 23:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7q7nopg2u 2025-02-07 02:06:40+00:00| seen|...

CVE-2025-21267

creationtimestamp| type| source ---|---|--- 2025-02-06 22:43:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113959359296898071 2025-02-06 23:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7pw4bgy2t 2025-02-07 02:06:46+00:00| seen|...

CVE-2025-21253

creationtimestamp| type| source ---|---|--- 2025-02-06 22:43:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113959359282487646 2025-02-06 23:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7ptlqch2a 2025-02-07 02:06:46+00:00| seen|...

MGASA-2025-0040 Updated gstreamer1.0, gstreamer1.0-plugins-base & gstreamer1.0-plugins-good packages fix security vulnerabilities

GStreamer has an OOB-write in isomp4/qtdemux.c. CVE-2024-47537 GStreamer has a stack-buffer overflow in vorbishandleidentificationpacket. CVE-2024-47538 GStreamer has an OOB-write in converttos3341a. CVE-2024-47539 GStreamer uses uninitialized stack memory in Matroska/WebM demuxer. CVE-2024-47540...

CVE-2025-22936

creationtimestamp| type| source ---|---|--- 2025-02-06 19:32:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113958608951294799 2025-02-06 20:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvpbsnj22s 2025-02-06 21:55:22+00:00| seen|...

CVE-2024-52892

creationtimestamp| type| source ---|---|--- 2025-02-06 19:32:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113958608936576132 2025-02-06 20:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvoyrcog2t 2025-02-06 21:55:30+00:00| seen|...

CVE-2024-36554

creationtimestamp| type| source ---|---|--- 2025-02-06 17:35:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113958148746207608 2025-02-06 17:39:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113958163944157698 2025-02-06 18:16:20+00:00| seen|...

CVE-2025-22866

creationtimestamp| type| source ---|---|--- 2025-02-06 16:56:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113957993164493622 2025-02-06 17:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlnmekyk27 2025-02-06 18:48:58+00:00| seen|...

Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc

Cisco has released updates to address two critical security flaws Identity Services Engine ISE that could allow remote attackers to execute arbitrary commands and elevate privileges on susceptible devices. The vulnerabilities are listed below - CVE-2025-20124 CVSS score: 9.9 - An insecure Java...

CVE-2021-40419

A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.13620121102. A specially-crafted series of network requests can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability...