PT-2025-27641 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - TwoColConflict Extension versions 1.39.X through 1.39.12 Mediawiki - TwoColConflict Extension versions 1.42.X through 1.42.6 Mediawiki - TwoColConflict Extension versions 1.43.X through 1.43.1 Description: The issue is related to...

JVN#89505333: Multiple vulnerabilities in Active! mail

Active! mail provided by QUALITIA CO., LTD. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Base Score 6.1 CVE-2025-52462 Cross-site request...

HPESBNW04886 rev.1 - HPE Telco Service Orchestrator Software, Server-Side Request Forgery (SSRF) Vulnerability

Potential Security Impact: Remote: Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v5.3.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-27817 |...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2025-182-01)

The version of mozilla-thunderbird installed on the remote host is prior to 140.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-182-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

GHSA-Q66Q-FX2P-7W4M @modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling

Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 2025.7.1 to resolve. Thank you to Elad Beber Cymulate for reporting these issues...

CGA-4394-XHFC-XWV2

Bulletin has no description...

RHSA-2025:9997 Red Hat Security Advisory: mod_proxy_cluster security update

Bulletin has no description...

RHSA-2025:9975 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2025:9751 Red Hat Security Advisory: OpenShift Container Platform 4.19.2 packages and security update

Bulletin has no description...

RHSA-2025:10005 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2025:10006 Red Hat Security Advisory: mod_auth_openidc:2.3 security update

Bulletin has no description...

RHSA-2025:10003 Red Hat Security Advisory: mod_auth_openidc:2.3 security update

Bulletin has no description...

RHSA-2025:10002 Red Hat Security Advisory: mod_auth_openidc security update

Bulletin has no description...

PT-2025-27616

Name of the Vulnerable Software and Affected Versions Model Context Protocol Servers Filesystem versions prior to 0.6.4 Model Context Protocol Servers Filesystem versions prior to 2025.7.01 Description An issue exists in the server-filesystem implementation of the Model Context Protocol MCP due t...

PT-2025-27574

Name of the Vulnerable Software and Affected Versions: Pillow versions 11.2.0 through 11.2.x Description: The issue is a heap buffer overflow that occurs when writing a sufficiently large image in the DDS format. This happens because the library writes into a buffer without checking for available...

PT-2025-27551 · Onelogin · Onelogin Ad Connector

Name of the Vulnerable Software and Affected Versions: OneLogin AD Connector versions prior to 6.1.5 Description: A cryptographic authentication bypass issue exists due to the exposure of a tenant’s SSO JWT signing key via the "/api/adc/v4/configuration" endpoint. An attacker with the signing key...

PT-2025-27565 · Unknown · Conprosys Hmi System

Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions prior to 3.7.7 Description: The issue is related to Cross-Site Scripting XSS in the getqsetting.php functionality, which could allow reflected execution of scripts in the browser on interaction...

SLNX Help Documentation of RICOH Streamline NX vulnerable to reflected cross-site scripting

Overview SLNX Help Documentation of RICOH Streamline NX provided by Ricoh Company, Ltd. contains a reflected cross-site scripting vulnerability. Reflected cross-site scripting via a specific parameter CWE-79 - CVE-2025-41439 Matteo Santini reported this vulnerability to Ricoh Company, Ltd. direct...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses nanoid-3.3.7.tgz which is vulnerable to CVE-2024-55565

Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses nanoid-3.3.7.tgz which is vulnerable to CVE-2024-55565. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-55565 DESCRIPTION: nanoid aka Nano ID before...

PT-2025-28013

Name of the Vulnerable Software and Affected Versions: MbedTLS versions 3.3.0 through 3.6.3 Description: The issue arises from the function mbedtls lms import public key not checking if the input buffer is at least 4 bytes before reading a 32-bit field. This allows for a possible out-of-bounds re...