CVE-2025-24397

An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins...

PT-2025-5360

Name of the Vulnerable Software and Affected Versions Jenkins Azure Service Fabric Plugin versions 1.6 and earlier Description A Cross-Site Request Forgery CSRF issue allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method. This...

PT-2025-5355

Name of the Vulnerable Software and Affected Versions Jenkins GitLab Plugin versions 1.9.6 and earlier Description The issue is related to an incorrect permission check in the Jenkins GitLab Plugin. This allows attackers with global Item/Configure permission, but lacking Item/Configure permission...

CVE-2025-24397: Incorrect Authorization

An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins...

FreeBSD : go -- multiple vulnerabilities (704aa72a-d840-11ef-a205-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 704aa72a-d840-11ef-a205-901b0e9408dc advisory. The Go project reports: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints A...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 44 for SLE 15 SP3) (SUSE-SU-2025:0137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Find Content IDs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Find Content IDs versions = 1.0...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 42 for SLE 15 SP3) (SUSE-SU-2025:0101-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advisory ROSA-SA-2025-2554

Software: libcaca 0.99 OS: rosa-server79 packageevrstring: libcaca-0.99-0.40.beta20.res7 CVE-ID: CVE-2018-20545 BDU-ID: 2019-01073 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the loadimage src/common-image.c function of the libcaca graphics library involves an integer overflow. Exploitation of t...

MGASA-2025-0007 Updated avahi packages fix security vulnerabilities

Avahi wide-area dns uses constant source port. CVE-2024-52615 Avahi wide-area dns predictable transaction ids. CVE-2024-52616...

Updated avahi packages fix security vulnerabilities

Avahi wide-area dns uses constant source port. CVE-2024-52615 Avahi wide-area dns predictable transaction ids. CVE-2024-52616...

[SECURITY] [DLA 4011-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4011-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 11, 2025 https://wiki.debian.org/LTS -...

openSUSE: Security Advisory for gstreamer (SUSE-SU-2025:0064-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:0060-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250108T191942 2025-01-08T19:19:42Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3371 GHSA-2r2v-9pf8-6342 GO-2025-3374 CVE-2025-22130 GHSA-j4jw-m6xr-fv6c - Update to...

OESA-2025-1036 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warnin...

WordPress Shipping via Planzer for WooCommerce plugin <= 1.0.25 - Reflected Cross-Site Scripting via processed-ids vulnerability

Reflected Cross-Site Scripting via processed-ids vulnerability discovered by vgo0 in WordPress Plugin Shipping via Planzer for WooCommerce versions = 1.0.25...

WordPress plugin Shipping via Planzer for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

PT-2025-1822

Name of the Vulnerable Software and Affected Versions Shipping via Planzer for WooCommerce plugin for WordPress versions up to, and including, 1.0.25 Description The issue is related to Reflected Cross-Site Scripting via the processed-ids parameter due to insufficient input sanitization and outpu...

CVE-2024-12337: Improper Neutralization of Input During Web Page Generation

The Shipping via Planzer for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘processed-ids’ parameter in all versions up to, and including, 1.0.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

PT-2025-4344

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the Linux kernel's handling of IOMMU stream IDs for Nvidia's Tegra MGBE controllers. The current driver is hardcoded to use MGBE0's stream ID for all controllers, causin...