PT-2025-26168 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue allows an authenticated user to embed...

PT-2025-26187 · Cryptpad · Cryptpad

Name of the Vulnerable Software and Affected Versions: CryptPad versions prior to 2025.3.0 Description: The issue concerns the "Link Bouncer" functionality in CryptPad, a collaboration suite, which attempts to filter javascript URIs to prevent Cross-Site Scripting XSS. However, this filtering can...

PT-2025-26071 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc5 Description: A data race issue in the Linux kernel's dmaengine sf-pdma component allows multiple threads to access and modify a DMA channel's descriptor simultaneously, leading to a NULL pointer...

CVE-2025-49824 conda-smithy Insecure Encryption Vulnerable to Oracle Padding Attack

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travisencryptbinstartoken implementation in the conda-smithy package has been identified as vulnerable to an Oracle Padding Attac...

CGA-C3FJ-QR55-VH7P

Bulletin has no description...

RHSA-2025:9166 Red Hat Security Advisory: apache-commons-beanutils security update

Bulletin has no description...

RHSA-2025:9155 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2025:9151 Red Hat Security Advisory: gvisor-tap-vsock security update

Bulletin has no description...

RHSA-2025:9150 Red Hat Security Advisory: gvisor-tap-vsock security update

Bulletin has no description...

RHSA-2025:9146 Red Hat Security Advisory: podman security update

Bulletin has no description...

RHSA-2025:9122 Red Hat Security Advisory: libvpx security update

Bulletin has no description...

RHSA-2025:9114 Red Hat Security Advisory: apache-commons-beanutils security update

Bulletin has no description...

PT-2025-25708

Name of the Vulnerable Software and Affected Versions eCommerce Product Catalog versions prior to 3.4.3 Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection in the impleCode eCommerce Product Catalog. Recommendations For versions prior to 3.4.3,...

PT-2025-25699 · Thembay · Thembay Zota

Name of the Vulnerable Software and Affected Versions: thembay Zota versions 1.3.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

PT-2025-25673 · Unknown · Themeton Spare

Name of the Vulnerable Software and Affected Versions: themeton Spare versions n/a through 1.7 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For themeton Spare versions n/a through 1.7, update to a version that fixes the...

PT-2025-25606 · WordPress · Wise Chat

Name of the Vulnerable Software and Affected Versions: Wise Chat plugin for WordPress versions up to, and including, 3.3.4 Description: The issue is related to Stored Cross-Site Scripting via the X-Forwarded-For header due to insufficient input sanitization and output escaping. This allows...

PT-2025-25721 · Unknown · Kama-Clic-Counter

Name of the Vulnerable Software and Affected Versions: Kama Click Counter versions through 4.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

PT-2025-25710 · Unknown · Merkulove Reformer For Elementor

Name of the Vulnerable Software and Affected Versions: merkulove Reformer for Elementor versions 1.0.0 through 1.0.5 Description: The issue allows an attacker to upload a web shell to a web server, potentially leading to unauthorized access and control. This is due to an Unrestricted Upload of Fi...

PT-2025-25672 · Unknown · Elite Video Player

Name of the Vulnerable Software and Affected Versions: Elite Video Player versions through 10.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables attackers to inject malicio...

Security Bulletin: NVIDIA NVDebug Tool - June 2025

NVIDIA has released a software update for NVIDIA® NVDebug tool to address the security issue that may lead to impacts described below. To protect your system, download and install the latest version of the NVDebug tool from the NVIDIA Developer Tools page. Go to NVIDIA Product Security. Details...