RHSA-2025:7437 Red Hat Security Advisory: avahi security update

Bulletin has no description...

RHSA-2025:7433 Red Hat Security Advisory: nodejs:22 security update

Bulletin has no description...

RHSA-2025:7435 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:7426 Red Hat Security Advisory: nodejs:20 security update

Bulletin has no description...

RHSA-2025:7425 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:7417 Red Hat Security Advisory: gimp security update

Bulletin has no description...

RHSA-2025:7397 Red Hat Security Advisory: skopeo security update

Bulletin has no description...

RHSA-2025:7350 Red Hat Security Advisory: perl-Module-ScanDeps security update

Bulletin has no description...

RHSA-2025:7317 Red Hat Security Advisory: python3.12-cryptography security update

Bulletin has no description...

RHSA-2025:7256 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2025:7163 Red Hat Security Advisory: xorg-x11-server security update

Bulletin has no description...

RHSA-2025:7165 Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Bulletin has no description...

Vulnerabilities fixed in Adobe Animate

Adobe has fixed vulnerabilities in Animate versions 24.0.8, 23.0.11 and earlier. The vulnerabilities include a critical vulnerability that allows arbitrary code execution via an out-of-bounds write, a NULL Pointer Dereference that can lead to application crashes, and several integer-related...

CVE-2024-52290 Stored XSS in Configuration Key Functionality

LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...

PT-2025-21218

Name of the Vulnerable Software and Affected Versions: a-blog cms versions prior to 3.1.43 a-blog cms versions prior to 3.0.47 Description: A cross-site scripting issue exists in a specific field in the entry editing screen of a-blog cms, requiring contributor or higher level privileges to exploi...

PT-2025-21167 · Opentext · Opentext Advance Authentication

Name of the Vulnerable Software and Affected Versions: OpenText Advance Authentication versions prior to 6.5 Description: The issue is related to improper input validation, which leads to a Cross-site Scripting XSS vulnerability. This type of vulnerability allows attackers to inject malicious...

PT-2025-21227 · Ibm · Ibm Semeru Runtime

Name of the Vulnerable Software and Affected Versions: IBM Semeru Runtime versions 8.0.302.0 through 8.0.442.0 IBM Semeru Runtime versions 11.0.12.0 through 11.0.26.0 IBM Semeru Runtime versions 17.0.0.0 through 17.0.14.0 IBM Semeru Runtime versions 21.0.0.0 through 12.0.6.0 Description: The issu...

PT-2025-21226 · Unknown · Bonigarcia Webdrivermanager

Name of the Vulnerable Software and Affected Versions: bonigarcia webdrivermanager versions 1.0.0 through 6.0.2 Description: The issue is related to an Improper Restriction of XML External Entity Reference, allowing Data Serialization External Entities Blowup. This affects the XML parsing...

Alibaba Cloud Linux 3 : 0060: ibus and glib2 (ALINUX3-SA-2022:0060)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0060 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-14822: A flaw was discovered in ibus in...

Alibaba Cloud Linux 3 : 0127: flatpak (ALINUX3-SA-2024:0127)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0127 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-32462: Flatpak is a system for building,...