Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in elliptic-6.5.4.tgz

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of elliptic-6.5.4.tgz Vulnerability Details CVEID:CVE-2024-48948 DESCRIPTION: The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in postgresql-42.5.1.jar

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of postgresql-42.5.1.jar Vulnerability Details CVEID:CVE-2024-1597 DESCRIPTION: pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default...

CVE-2025-7345

A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...

CVE-2025-42965

creationtimestamp| type| source ---|---|--- 2025-07-08 03:57:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgfv3tl2e25...

CVE-2025-42969

creationtimestamp| type| source ---|---|--- 2025-07-08 03:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgdsnyxdz2e...

CVE-2025-7277

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-524/...

CVE-2025-7238

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-505/...

CVE-2025-7297

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-545/ 2025-09-09 20:56:44+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

CVE-2025-7316

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-563/...

CVE-2025-7290

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-538/...

CVE-2025-7276

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-523/...

PT-2025-28422 · Undefined · Undefined

CVE-2025-53613 Rejected reason https://t.co/OlPUYo226M...

PT-2025-28802 · WordPress · Wcfm – Frontend Manager For Woocommerce +1

Name of the Vulnerable Software and Affected Versions: WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress versions up to and including 6.7.16 Description: The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription...

Ubuntu: Security Advisory (USN-7619-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB5062560: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2025)

The remote Windows host is missing security update 5062560. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...

AMD Store Queue security vulnerability

The AMD Store Queue is an important component of a processor architecture from UltraMicro Semiconductor AMD that is primarily used to manage instruction queues for storage Store operations. A security vulnerability exists in AMD Store Queue. No information about this vulnerability is available at...

Microsoft Windows Resource Management Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows is vulnerable to a resource management error. No detailed vulnerability details are provided at this time...

Moderate: jq security update

jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Security Fixes: jq: jq has signed integer...

CVE-2025-53543

creationtimestamp| type| source ---|---|--- 2025-07-07 23:51:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltfy4rptmg2w...

CVE-2025-6663

A stack based buffer overflow was found in the GStreamer media handling library. This flaw allows an attacker who is able to feed in a maliciously constructed H266 file to execute arbitrary code in the context of the process running GStreamer. Mitigation Mitigation for this issue is either not...