CGA-VCWR-7247-M88R

Bulletin has no description...

RHSA-2025:12892 Red Hat Security Advisory: redis:7 security update

Bulletin has no description...

RHSA-2025:12842 Red Hat Security Advisory: qt5-qt3d security update

Bulletin has no description...

RHSA-2025:12749 Red Hat Security Advisory: sqlite security update

Bulletin has no description...

CVE-2025-8551 atjiu pybbs list cross site scripting

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/comment/list. The manipulation of the argument Username leads to cross site scripting. The attack may be launched remotely. The exploit h...

BELL-CVE-2025-54350

Bulletin has no description...

Improper Authorization

@haxtheweb/haxcms-nodejs and elmsln/haxcms are vulnerable to Improper Authorization. The vulnerability is due to failure to verify if an authenticated user has permission to interact with a resource before performing operations...

CVE-2025-54804 Russh is missing an overflow check during channel windows adjust

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an...

ALSA-2025:12834 Moderate: python3.12-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CGA-FXJQ-G46F-7R8Q

Bulletin has no description...

WordPress WP Import Export Lite plugin <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Vincent Fourcade vinceMatsui in WordPress Plugin WP Import Export Lite versions = 3.9.28...

MAL-2025-6734 Malicious code in jcr-hopper (npm)

The package communicates with a domain associated with malicious activity...

DLA-4263-1 ruby-graphql - security update

Bulletin has no description...

MINI-CV7C-75R7-M84R

Bulletin has no description...

MINI-GXX6-WQR3-9HV4

Bulletin has no description...

MINI-2CXJ-C57Q-397W

Bulletin has no description...

MAL-2025-6739 Malicious code in node-calculator-fahw (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-52131

The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field...

MAL-2025-6692 Malicious code in aiohappyeyeballs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2059da56cd060292843a9bf0b02a2c41b90d84e83b5b15aa59580a8bc9084a23 The OpenSSF Package Analysis project identified 'aiohappyeyeballs' @...

MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...