PT-2025-25575

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.12 Description The issue concerns the inclusion of the full IP address of the acting user in audit log notifications. This information could be obtained by third-party servers, such as SMTP relays or spam filters...

TencentOS Server 3: thunderbird (TSSA-2024:0490)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0490 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 4: man2html (TSSA-2025:0185)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0185 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

MINI-V36F-4VMG-GFFQ

Bulletin has no description...

MINI-8VXQ-J4J2-PX5R

Bulletin has no description...

CGA-H2VG-69P5-8VM4

Bulletin has no description...

CGA-W8CX-XRG2-F6PJ

Bulletin has no description...

CGA-5X6X-RWPR-FW3J

Bulletin has no description...

CGA-8V23-2CRJ-HXP9

Bulletin has no description...

[SECURITY] Fedora 41 Update: python3.12-3.12.11-1.fc41

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

PT-2025-25476 · WordPress · Easy Flashcards

Name of the Vulnerable Software and Affected Versions: Easy Flashcards plugin for WordPress version 0.1 and earlier Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'ef settings submenu' page. This allows unauthenticated attackers...

PT-2025-25490 · Apache · Apache Nuttx Rtos

Name of the Vulnerable Software and Affected Versions: Apache NuttX RTOS versions 6.22 through 12.9.0 Description: An issue was discovered in the Apache NuttX RTOS apps/examples/xmlrpc application, where a device stats structure stored remotely provided parameters with a hardcoded buffer size,...

CVE-2025-49586

XWiki is affected by CVE-2025-49586, a remote code execution (RCE) vulnerability in which any user with edit rights on at least one App Within Minutes application can obtain programming rights and execute code by editing the application. The flaw is fixed in XWiki releases 17.0.0, 16.4.7, and 16....

RHSA-2025:9043 Red Hat Security Advisory: golang security update

Bulletin has no description...

RHSA-2025:9019 Red Hat Security Advisory: containernetworking-plugins security update

Bulletin has no description...

PT-2025-25445 · Dell · Dell Controlvault3 +1

Name of the Vulnerable Software and Affected Versions: Dell ControlVault3 versions prior to 5.15.10.14 Dell ControlVault3 Plus versions prior to 6.2.26.36 Description: An out-of-bounds read vulnerability exists in the cv send blockdata functionality. A specially crafted ControlVault API call can...

PT-2025-25438 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions prior to 16.4.7 XWiki versions prior to 16.10.3 XWiki versions prior to 17.0.0 Description: The issue allows any XWiki user with edit rights on at least one App Within Minutes application to obtain programming rights and perfor...

PT-2025-25425 · Drupal · Drupal Bookable Calendar

Name of the Vulnerable Software and Affected Versions: Drupal Bookable Calendar versions 0.0.0 through 2.2.12 Description: The issue is related to a Missing Authorization vulnerability in Drupal Bookable Calendar, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 2.2.12,...

JVN#27937557: Multiple vulnerabilities in RICOH Streamline NX PC Client

RICOH Streamline NX PC Client provided by Ricoh Company, Ltd. contains multiple vulnerabilities listed below. External control of file name or path CWE-73 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N Base Score 6.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Base Score 6.5...

PT-2025-29178 · Advantech · Iview

Name of the Vulnerable Software and Affected Versions: Advantech iView versions prior to 5.7.05 build 7057 Description: A vulnerability allows a reflected cross-site scripting XSS attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in a user’s browser,...