OPENSUSE-SU-2025:15089-1 iputils-20240905-3.1 on GA media

These are all security issues fixed in the iputils-20240905-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15075-1 golang-github-prometheus-node_exporter-1.9.1-3.1 on GA media

These are all security issues fixed in the golang-github-prometheus-nodeexporter-1.9.1-3.1 package on the GA media of openSUSE Tumbleweed...

RHSA-2025:4488 Red Hat Security Advisory: ruby:3.1 security update

Bulletin has no description...

Moderate: ruby:3.1 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rexml: DoS vulnerability in REXML CVE-2024-39908 rexml: rubygem-rexml: DoS when parsing an XML having many specific characters suc...

OPENSUSE-SU-2025:15043-1 libsoup-3_0-0-3.6.5-3.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.5-3.1 package on the GA media of openSUSE Tumbleweed...

RHSA-2025:4063 Red Hat Security Advisory: ruby:3.1 security update

Bulletin has no description...

CVE-2025-30707

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Management. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks ...

CVE-2025-39528

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes rescue-shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through = 3.1...

CVE-2025-39528

CVE-2025-39528 — WordPress Rescue Shortcodes stored XSS . The Rescue Shortcodes plugin (vulnerable component: input handling during web page generation) permits a stored Cross‑Site Scripting vulnerability affecting Rescue Shortcodes versions n/a through 3.1. Public details confirm the issue type ...

WordPress plugin Rescue Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-30724

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are affected are 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher...

CVE-2025-30728

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks...

CVE-2025-30722

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2025-30710

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: NDBCluster Plugin. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2025-30692

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.2.7-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupplier Portal...

CVE-2025-30685

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2025-30703

Removed by vendor...

PT-2025-14842 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 code-projects Patient Record Management System version 3.1 Description: A critical issue was found in the Patient Record Management System. The problem is related to an unknown...

WordPress plugin Advanced WooCommerce Product Sales Reporting SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

Security Bulletin: AIX is vulnerable to a privilege escalation vulnerability (CVE-2022-34356)

Summary UPDATED Oct 10 Added iFixes with the correct prereqs for VIOS 3.1.2.30 and 3.1.2.40: A vulnerability in the AIX kernel could allow a non-privileged local user to obtain root privileges CVE-2022-34356. Vulnerability Details CVEID:CVE-2022-34356 DESCRIPTION: IBM AIX could allow a...