PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack

A previously undocumented China-aligned advanced persistent threat APT group named PlushDaemon has been linked to a supply chain attack targeting a South Korean virtual private network VPN provider in 2023, according to new findings from ESET. "The attackers replaced the legitimate installer with...

Fortinet多款产品 安全漏洞

Fortinet FortiManager and others are products of Fortinet, Inc.Fortinet FortiManager is a centralized network security management platform.Fortinet FortiMail is a suite of email security gateway products.Fortinet FortiProxy is a secure web proxy that protects employees from cyberattacks by...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.5 release and security update

Red Hat JBoss Web Server 6.0.5 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.5 release and security update

An update is now available for Red Hat JBoss Web Server 6.0 on Red Hat Enterprise Linux versions 8 and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2025-1197 · Unknown · Sante Pacs Server

Name of the Vulnerable Software and Affected Versions: Sante PACS Server affected versions not specified Description: This issue allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this issue. Th...

PT-2025-1349 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an untrusted pointer used in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-1347 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an unauthenticated remote code execution in the Apache HTTP Server. No specific details about affected versions, estimated number of potentially affected...

CVE-2024-26154

All versions of ETIC Telecom Remote Access Server RAS prior to 4.5.0 are vulnerable to reflected cross site scripting in the appliance site name. The ETIC RAS web server saves the site name and then presents it to the administrators in a few different pages...

CVE-2024-26154 ETIC Telecom Remote Access Server (RAS) Cross-site Scripting

All versions of ETIC Telecom Remote Access Server RAS prior to 4.5.0 are vulnerable to reflected cross site scripting in the appliance site name. The ETIC RAS web server saves the site name and then presents it to the administrators in a few different pages...

RHSA-2025:0361 Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.2 release and security update

Bulletin has no description...

Schneider Electric Modicon M580 安全漏洞

The Schneider Electric Modicon M580 is a programmable automation controller from Schneider Electric France. A security vulnerability exists in the Schneider Electric Modicon M580 that stems from the inclusion of a buffer size miscalculation vulnerability that could result in a denial of service o...

HPESBUX04773 rev.1 - HP-UX Apache Web Server, Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass, Code Execution, Disclosure of Information, Server-Side Request Forgery SSRF, memory corruption, Null pointer dereference; Remote: Code Execution, Server-Side Request Forgery SSRF, Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY...

[SECURITY] [DLA 4017-1] tomcat9 security update

Debian LTS Advisory DLA-4017-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 17, 2025 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.43-2deb11u11 CVE ID : CVE-2024-21733 CVE-2024-38286 CVE-2024-50379 CVE-2024-52316 CVE-2024-56337 Several...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.2 release and security update

Red Hat JBoss Web Server 5.8.2 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVS...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.2 release and security update

An update is now available for Red Hat JBoss Web Server 5.8 on Red Hat Enterprise Linux versions 7, 8, and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Zenitel AlphaWeb XE 安全漏洞

Zenitel AlphaWeb XE is an embedded web server from Zenitel running on AlphaCom XE. A security vulnerability exists in Zenitel AlphaWeb XE version v11.2.3.10. An attacker can exploit the vulnerability to read arbitrary files on the application service...

PT-2025-1360 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2022-21384 - Apache HTTP Server Remote Code Execution Vulnerability", "Content": "CVE ID : CVE-2022-21384 Published : Jan. 16, 2025, 12:15 a.m. | 37 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering...

RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.8.2 (RHSA-2025:0361)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0361 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apac...

Siemens SIPROTEC 5 安全漏洞

SIPROTEC 5 devices provide a range of integrated protection, control, measurement and automation functions for substations and other applications. A File Access Improperly Restricted vulnerability exists in Siemens SIPROTEC 5. The vulnerability, which arises from the device not properly restricti...

CVE-2024-42168

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...