io.quarkus:quarkus-mailer (0.19.0), io.quarkus:quarkus-mailer-deployment (0.19.0) +15 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.19.0)

io.quarkus:quarkus-vertx MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 0.19.0 - io.quarkus:quarkus-mailer-deployment 0.19.0 -...

io.quarkus:quarkus-mailer (1.3.0.final), io.quarkus:quarkus-mailer-deployment (1.3.0.final) +38 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.3.0.final)

io.quarkus:quarkus-vertx MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.3.0.final - io.quarkus:quarkus-mailer-deployment 1.3.0.final -...

io.quarkus:quarkus-grpc (2.1.4.final), io.quarkus:quarkus-grpc-common (2.1.4.final) +33 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.1.4.final)

io.quarkus:quarkus-vertx MAVEN version 2.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-grpc 2.1.4.final - io.quarkus:quarkus-grpc-common 2.1.4.final -...

CVE-2025-34511

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...

VulnCheck KEV: CVE-2025-34511

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...

CVE-2025-34511

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...

CVE-2025-34511

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...

CVE-2025-34511

The Sitecore PowerShell Extensions add-on for Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0, is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can leverage crafted HTTP requests to upload arbitrary files, leading to remote co...

EUVD-2025-18568

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...

CVE-2025-34511 Sitecore PowerShell Extension RCE via Unrestricted Upload

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...

CVE-2025-34511 Sitecore PowerShell Extension RCE via Unrestricted Upload

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...

Security update for xwayland

This update for xwayland fixes the following issues: CVE-2025-49175: Out-of-bounds access in X Rendering extension Animated cursors bsc1244082. CVE-2025-49176: Integer overflow in Big Requests Extension bsc1244084. CVE-2025-49177: Data leak in XFIXES Extension 6 XFixesSetClientDisconnectMode...

CVE-2025-34511: Unrestricted Upload of File with Dangerous Type

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...

CVE-2025-6179

Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In the mm, slab context, slab-objexts should always be cleaned up after allocation. When memory allocation profiling is disabled at runtime or due to an error, the shutdownmemprofiling function is called. In this case, slab-objex...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In the slab mechanism, ensure that slab-objexts is cleared in a newly allocated slab page. Ktest recently reported crashes while running several buffered I/O tests. The cause of the crashes was the alloctaggingslaballochook...

Astra Linux – Vulnerability in Intel Microcode

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privileges through local access...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference The function tcfextsmisscookiebasealloc calls xaalloccyclic, which may return 1 if the allocation succeeds after wrapping. This was previously treated as an error, wi...

Google ChromeOS security vulnerabilities

Google ChromeOS is a Linux kernel-based operating system developed by Google. Google ChromeOS suffers from a privilege issue vulnerability. The vulnerability stems from a privilege bypass in extension management, which can be exploited by an attacker to disable extensions on ChromeOS and access...

CVE-2025-49579 Citizen allows stored XSS in menu heading message

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. All system messages in menu headings using the Menu.mustache template are inserted as raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group h...