RLSA-2024:11192 Moderate: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 For more details about the security issues, including the impact, a CVSS score,...

RLSA-2024:4438 Moderate: dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.132 and Runtime 6.0.32. Security...

Authentication Bypass

@account-kit/smart-contracts is vulnerable to Authentication Bypass. The vulnerability is due to faulty access control due to a bug in the allowlist logic that permitted session keys to bypass allowlist restrictions...

CVE-2025-20181

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the...

Multiple Cisco Products Switch Integrated Security Features DHCPv6 Denial of Service Vulnerability

A vulnerability in the Switch Integrated Security Features SISF of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected...

WordPress DELUCKS SEO plugin <= 2.5.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin DELUCKS SEO versions = 2.5.9...

GHSA-79M9-55JC-P6MW scanner has a Public API without sufficient bounds checking

Match::get and Match::ptr lack sufficient bounds checks, leading to potential out of bounds reads...

CVE-2025-47545

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Ays Pro Poll Maker allows Leveraging Race Conditions. This issue affects Poll Maker: from n/a through 5.7.7...

CVE-2025-47441

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chris Reynolds Progress Bar progress-bar allows Stored XSS.This issue affects Progress Bar: from n/a through = 2.2.3...

CVE-2024-47619 tranport: TLS host name wildcard matching too lax

syslog-ng is an enhanced log daemo. Prior to version 4.8.2, tlswildcardmatch matches on certificates such as foo..bar although that is not allowed. It is also possible to pass partial wildcards such as foo.ac.bar which glib matches but should be avoided / invalidated. This issue could have an...

WordPress Simple Giveaways plugin <= 2.49.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Simple Giveaways versions = 2.49.0...

WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by domiee13 in WordPress Plugin PW WooCommerce Bulk Edit versions = 2.134...

BELL-CVE-2023-53061

Bulletin has no description...

BELL-CVE-2023-53138

Bulletin has no description...

BELL-CVE-2023-53045

Bulletin has no description...

BELL-CVE-2023-53141

Bulletin has no description...

BELL-CVE-2023-53043

Bulletin has no description...

BELL-CVE-2025-47268

Bulletin has no description...

PT-2025-20188 · Unknown · Apasionados Email Notification On Login

Name of the Vulnerable Software and Affected Versions: apasionados Email Notification on Login versions n/a through 1.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...

PT-2025-20169 · Unknown · Lehel Mátyus Legal Terms/Conditions Popup For User Login/Woocommerce Checkout

Name of the Vulnerable Software and Affected Versions: Lehel Mátyus Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL versions 2.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored...