Bundesamt für Sicherheit in der Informationstechnik vulnerabilities and threats

Squid ist ein Open-Source Web Proxy Cache für Unix und Windows Plattformen. Die Software unterstützt Proxying und Caching von HTTP, FTP und anderen Protokollen, sowie SSL und Access Control Lists.

GStreamer ist ein Multimedia-Framework mit einer Plugin-basierten Architektur für eine Vielzahl von Plattformen.

Multiple vulnerabilities have been identified in the open-source MISP platform for threat information sharing. These issues affect versions prior to 2.5.40. A fix is available in version 2.5.40. There are no known exploits in the wild, and no CVSS score is provided for these vulnerabilities.

n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.

UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.

Microsoft Dynamics 365 ist eine All-in-One-Unternehmensmanagementlösung.

Zoom Workplace ist eine Plattform, die Videokonferenz-, Chat-, Telefon- und Collaboration-Tools integriert, um Remote- und Hybrid-Arbeitsumgebungen in Unternehmen zu unterstützen.

Ivanti Endpoint Manager Mobile ist eine mobile Verwaltungssoftware zur Verwaltung von Richtlinien für mobile Geräte, Anwendungen und Inhalte.

A vulnerability has been identified in Wazuh Manager version 5.0.0-beta3 that allows privilege escalation. Wazuh is an open-source security monitoring platform providing intrusion detection, log analysis, and SIEM capabilities. This issue could enable an attacker to gain elevated privileges within the affected system. No CVSS score or detailed technical exploitation information is currently available. There are no known exploits in the wild at this time. No official patch or remediation guidance has been provided yet by the vendor.

LoadMaster ist eine Load Balancer Lösung von Progress Software.

Multiple cross-site scripting (XSS) vulnerabilities have been identified in VMware Cloud Foundation Operations, specifically affecting VMware Aria Operations versions prior to 8.18.7. These vulnerabilities could allow an attacker to inject malicious scripts into the web interface. VMware Cloud Foundation is a hybrid cloud platform for VM management and container orchestration, and VMware Aria Operations provides unified IT operations management across private, hybrid, and multi-cloud environments.

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Budibase, an open-source low-code platform for building internal applications, has multiple vulnerabilities that allow manipulation of files. These issues affect versions up to and including 3.39.0. No CVSS score is provided, and no known exploits are reported in the wild. The vulnerabilities were published by the Bundesamt für Sicherheit in der Informationstechnik. No patch or remediation information is currently available.

Znuny ist eine Open Source Ticketing Software.

Snipe-IT ist eine webbasierte Open-Source-Asset-Management-Software, die Unternehmen bei der Verfolgung von Hardware und Software unterstützt.

Der Kernel stellt den Kern des Linux Betriebssystems dar.

NGINX ist eine Webserver-, Reverse Proxy- und E-Mail-Proxy Software. NGINX Plus ist die kommerzielle Variante von NGINX, einer Webserver-, Reverse Proxy- und E-Mail Proxy Software.

Multiple vulnerabilities have been identified in Mattermost, a web-based instant messaging service, affecting its Desktop, Server, and Mobile versions. The advisory from the Bundesamt für Sicherheit in der Informationstechnik references six CVEs but does not provide detailed technical descriptions or CVSS scores. No affected versions or patch information are specified. There are no known exploits in the wild at this time.

A cross-site scripting (XSS) vulnerability exists in WP Royal Elementor Addons, a WordPress page builder extension. The flaw affects versions prior to 1.7.1041 and has been fixed in version 1.7.1041. No public exploit or active exploitation is currently known.

Multiple vulnerabilities affecting the Linux kernel have been identified, including use-after-free bugs and denial of service issues in various kernel components such as bonding driver, erofs filesystem, ALSA 6fire, ip6_tunnel, ipv6 routing, selinux overlayfs, and others. These vulnerabilities impact core Linux kernel functionality across several distributions including Red Hat Enterprise Linux 9 and 10. Security updates addressing these issues have been released by Red Hat and require system reboot to take effect.