Multiple vulnerabilities have been fixed in the FreeBSD bhyve hypervisor by the FreeBSD community. These vulnerabilities relate to issues such as heap-based buffer overflows, race conditions, and improper synchronization. No CVSS score is provided, and no specific affected versions are stated. There is no indication of known exploits in the wild.
Multiple vulnerabilities have been addressed in the Cisco Expressway Series by Cisco. The specific details of these vulnerabilities, including affected versions and CVSS scores, are not provided. No known exploits are reported in the wild. The vulnerabilities cover a range of common weakness enumerations (CWEs) such as improper certificate validation, hardcoded credentials, path traversal, cross-site scripting, SQL injection, and others. Cisco is not a cloud service in this context, and no patch links or vendor advisory details are included.
Multiple vulnerabilities have been fixed in Snort 3, an open source intrusion detection and prevention system used in various Cisco products. These vulnerabilities were addressed by Cisco as reported by the Nationaal Cyber Security Centrum. No specific affected versions or detailed technical information about the vulnerabilities are provided. There is no CVSS score available for these issues, and no known exploits in the wild have been reported.
GitLab has fixed 12 vulnerabilities in both the Community Edition (CE) and Enterprise Edition (EE) versions. Among these, one vulnerability is rated as critical. The affected versions span from 7.0 up to certain 19.x releases. No CVSS score is provided for these vulnerabilities. There are no known exploits in the wild reported at this time.
Microsoft has addressed multiple vulnerabilities in various Dynamics components. Specific details about the vulnerabilities, affected versions, and exploit methods are not provided. No CVSS score is available for these issues. No known exploits in the wild have been reported. The vulnerabilities are associated with CWE-502, which relates to deserialization of untrusted data. No patch links or vendor advisory details are included in the provided information.
Citrix has fixed eight vulnerabilities in NetScaler ADC and NetScaler Gateway affecting certain versions prior to specific patch releases. These vulnerabilities also impact Secure Private Access Hybrid deployments using NetScaler instances. The advisory applies only to customer-managed NetScaler ADC and Gateway systems; Citrix-managed cloud services receive updates directly from the vendor.
Two critical vulnerabilities affecting Check Point VPN products have been addressed by the vendor. The vulnerabilities correspond to CWE-122 (Heap-based Buffer Overflow) and CWE-295 (Improper Certificate Validation). No CVSS score is provided, and no known exploits in the wild have been reported. The vendor has released fixes, but specific affected versions and patch details are not provided in the available data.
Multiple vulnerabilities have been addressed in Adobe Illustrator as reported by the Nationaal Cyber Security Centrum. These include issues related to CWE-863 (Incorrect Authorization) and CWE-787 (Out-of-bounds Write). No specific affected versions or CVSS scores are provided. There are no known exploits in the wild at this time.
Multiple vulnerabilities have been addressed in Adobe ColdFusion as reported by the Nationaal Cyber Security Centrum. These include a set of nine CVEs involving common weaknesses such as cross-site scripting (CWE-79), code injection (CWE-95), and SQL injection (CWE-89). No specific affected versions or detailed technical descriptions are provided. There are no known exploits in the wild at this time. Patch availability is not explicitly confirmed in the provided data.
Multiple vulnerabilities have been addressed in Adobe Commerce as reported by the Nationaal Cyber Security Centrum. These include issues related to CWE-79 (Cross-site Scripting), CWE-863 (Incorrect Authorization), and CWE-22 (Path Traversal). No specific affected versions or CVSS scores are provided. There are no known exploits in the wild at this time. The vulnerabilities have been fixed, but explicit patch details are not available in the provided data.
Multiple vulnerabilities have been fixed in Adobe Photoshop Desktop as reported by the Nationaal Cyber Security Centrum. These include eight distinct CVEs related to issues such as buffer overflows, integer overflows, and improper resource management. No specific affected versions or CVSS scores are provided. There are no known exploits in the wild at this time.
Multiple vulnerabilities have been addressed in Ivanti Neurons for ITSM as reported by the Nationaal Cyber Security Centrum. These include eight distinct CVEs related to issues such as improper authorization and unsafe deserialization. No CVSS scores are provided, and no known exploits in the wild have been reported. The affected versions are not explicitly stated. The vulnerabilities have been fixed according to the advisory.
Multiple vulnerabilities have been addressed in various SAP products including SAP Extended Passport Protocol processing library, SAP NetWeaver Message Server, SAP GUI for Java, and others. These vulnerabilities span a range of weaknesses as indicated by associated CWEs. No specific affected versions or detailed exploit information is provided. No CVSS score is available for these vulnerabilities.
Multiple vulnerabilities have been addressed in various Fortinet products including FortiAnalyzer, FortiOS, FortiPAM, FortiProxy, FortiSandbox, FortiManager, FortiManager Cloud, FortiMonitorOnSight, FortiClient Windows, FortiSIEM, and FortiSOAR. These vulnerabilities cover a range of weaknesses such as improper handling of resources, null pointer dereferences, command injection, improper certificate validation, insufficient access control, and open redirect issues. The advisory is published by the Nationaal Cyber Security Centrum and references ten CVEs. No specific affected versions or CVSS scores are provided, and no known exploits in the wild have been reported at this time.
Multiple vulnerabilities have been fixed in GeoNetwork, an open-source catalog application maintained by OpenGeo. The affected versions include 4.4.5 through 4.4.11 and versions prior to 4.4.12 and 4.2.17. The vulnerabilities correspond to CWE-79 (Cross-site Scripting), CWE-470 (Use of Externally-Controlled Input to Select Classes or Code), and CWE-862 (Missing Authorization). No CVSS score is provided, and no known exploits in the wild have been reported.
Google has fixed multiple vulnerabilities in Google Chrome versions prior to 152.0.7977.82. These vulnerabilities include various types such as use-after-free, out-of-bounds access, and improper input validation, as indicated by associated CWEs. No known exploits in the wild have been reported. The patch status is implied by the fixed version but no explicit vendor advisory or patch links are provided.
Multiple vulnerabilities have been addressed in HPE Networking Fabric Composer, a product under Aruba Networks by Hewlett Packard Enterprise. The advisory from the Nationaal Cyber Security Centrum reports a total of 45 CVEs related to this product, covering a range of weaknesses including cross-site scripting, command injection, and authentication bypass. Specific affected versions are not detailed in the available information. No CVSS scores are provided, and there are no known exploits in the wild at this time.
Multiple vulnerabilities have been addressed in various Ubiquiti UniFi products, including UniFi Protect, UniFi OS, UniFi Network Application, and others. These issues were identified and remediated by Ubiquiti, as reported by the Nationaal Cyber Security Centrum. The vulnerabilities span a range of CVEs, totaling 22 distinct identifiers. No specific affected versions or detailed technical exploitation information is provided. There is no indication of known exploits in the wild at this time.
Multiple vulnerabilities have been addressed in the DrayTek VigorSwitch product line by the Nationaal Cyber Security Centrum. These issues include a range of weaknesses such as command injection, null pointer dereference, path traversal, authorization bypass, and buffer overflow. The affected products include DrayTek VigorSwitch FX2120 and potentially other versions, though exact affected versions are not specified. No CVSS score is available for these vulnerabilities. There is no indication of known exploits in the wild. Patch or remediation details are not provided in the source data.