Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Overview llama-index-readers-stripe-docs is a llama-index readers stripedocs integration Affected versions of this package are vulnerable to Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' via the parsesitemap function. An attacker can exhaust system memory and...

Important: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this...

Important: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support EXTENSION, and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as...

ALSA-2025:10371 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: mcast: extend RCU protection in igmp6send CVE-2025-21759 kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes CVE-2025-21991 kernel: vmxnet3: Fix malform...

MozillaThunderbird-128.12.0-1.1 on GA media (moderate)

MozillaThunderbird-128.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15312-1 Rating: moderate Cross-References: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6429 CVE-2025-6430 CVSS scores: CVE-2025-6424 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-6424 SUSE : 8....

RHEL 7 : tigervnc (RHSA-2025:10375)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10375 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

PT-2025-28033 · Dradis · Dradis

Name of the Vulnerable Software and Affected Versions: Dradis versions through 4.16.0 Description: Dradis allows referencing external images over HTTPS instead of requiring the use of embedded images. This can be exploited by an authorized author to attempt to steal the Net-NTLM hashes of other...

go1.24-1.24.4-1.1 on GA media (moderate)

go1.24-1.24.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15224-1 Rating: moderate Cross-References: CVE-2025-0913 CVE-2025-22874 CVE-2025-4673 CVSS scores: CVE-2025-0913 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2025-0913 SUSE : 6.8...

Dradis 安全漏洞

Dradis is a suite of reporting and collaboration tools for information security teams. A security vulnerability exists in Dradis 4.16.0 and prior versions that stems from allowing references to external images, which could lead to the theft of Net-NTLM hashes from other users on a Windows domain...

firefox-esr-128.12.0-1.1 on GA media (moderate)

firefox-esr-128.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15216-1 Rating: moderate Cross-References: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6429 CVE-2025-6430 CVSS scores: CVE-2025-6424 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-6424 SUSE : 8.7...

jq-1.8.1-1.1 on GA media (moderate)

jq-1.8.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15233-1 Rating: moderate Cross-References: CVE-2024-23337 CVE-2025-48060 CVE-2025-49014 CVSS scores: CVE-2024-23337 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-23337 SUSE : 6.7...

PHP 8.4.x < 8.4.10 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.4.10. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.10 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Moderate: Red Hat Security Advisory: ruby:3.3 security update

An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring Syste...

CVE-2025-39362 WordPress Mollie Payments for WooCommerce plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability

Missing Authorization vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce.This issue affects Mollie Payments for WooCommerce: from n/a through = 8.0.2...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ALSA-2025:10217 Moderate: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 CGI: Denial of Service in CGI::Cookie.parse...

Moderate: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 CGI: Denial of Service in CGI::Cookie.parse...

Oracle Linux 9 : python3.11 (ELSA-2025-10148)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10148 advisory. - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Tenable has extracted the preceding description block...

ALSA-2025:10189 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...