BELL-CVE-2025-38355

Bulletin has no description...

BELL-CVE-2025-38370

Bulletin has no description...

Insufficiently Protected Credentials

Overview org.opencastproject:opencast-common is a The free and open source solution for automated video capture and distribution at scale. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the process of fetching MediaPackage elements included in a...

CVE-2025-38418

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc-cleantable after rprocattach fails When rproc-state = RPROCDETACHED is attached to remote processor through rprocattach, if rprochandleresources returns failure, then the clean table should be...

CVE-2025-31955

creationtimestamp| type| source ---|---|--- 2025-07-24 21:40:18+00:00| seen| Telegram/Epk51imlWNQwvFQRKl877jcE3J7nzmk-LsJImIJN1ZwezWE...

CVE-2025-31952

creationtimestamp| type| source ---|---|--- 2025-07-24 21:40:17+00:00| seen| Telegram/uNJ1koXpEvE9NRYOBvH5HVO3jJXTYkWlpamI9kj4P07xU...

CVE-2024-5154

creationtimestamp| type| source ---|---|--- 2025-07-24 13:36:22+00:00| seen| Telegram/GCTI22YP1CSYMpL-V3OiPdnPXzKD3Fjy8IUdp0zDr1mxfY...

CVE-2024-53286

creationtimestamp| type| source ---|---|--- 2025-07-23 04:34:33+00:00| seen| Telegram/8ciReg4XgtxU0DdOSBqBxWkKPmZ0YyveWaK086BwK-Kd0...

Malicious code in splice-pulumi-common-validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14575bc2da7a355de468310839aa06cea1b89f21b60553520aacc0b5cd693ef Any computer that has this package installed or running should be considered...

MAL-2025-6128 Malicious code in splice-pulumi-common-validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14575bc2da7a355de468310839aa06cea1b89f21b60553520aacc0b5cd693ef Any computer that has this package installed or running should be considered...

CVE-2025-36057

creationtimestamp| type| source ---|---|--- 2025-07-21 18:34:27+00:00| seen| Telegram/f69C7OYqpUjl176j50OorOLaQen3qAEtfPE0R-rAiQLw...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Siemens SICAM TOOLBOX II Trust Management Issue Vulnerability (CNVD-2025-16621)

Siemens SICAM TOOLBOX II is an engineering software from Siemens, Germany. A trust management issue vulnerability exists in Siemens SICAM TOOLBOX II that stems from a common name not being checked for device certificates, which could be exploited by an attacker to cause a man-in-the-middle attack...

CVE-2025-7906 yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1 and classified as critical. This issue affects the function uploadFile of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java. The manipulation of the argument File leads to unrestricted upload. The...

Important: Red Hat Security Advisory: OpenJDK 8u462 Windows Security Update

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

...

SUSE CVE-2025-50059

unknown...

CVE-2025-50105

creationtimestamp| type| source ---|---|--- 2025-07-16 14:28:53+00:00| seen| Telegram/i5WZsZh0E1S8me1aEhPBtRc8vbBlbPHuTG37D0VBAuAnD3U...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via specific endpoints. An attacker can make the system initiate arbitrary network requests to internal or external resources by sending crafted requests to these endpoints. Remediation There is no fixed...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force via the login process. An attacker can gain unauthorized access or disrupt service by repeatedly attempting authentication without restriction. Remediation There is no fixed version for...