12577 matches found
PT-2025-16417
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise MyS...
Mozilla Firefox Security Advisory (MFSA2025-25) - Linux
The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-25. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
CVE-2025-32428 Jupyter Remote Desktop Proxy makes TigerVNC accessible via the network and not just via a UNIX socket as intended
Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still...
CGA-GJJQ-CF3W-FM68
Bulletin has no description...
BIT-LARAVEL-2025-27515 Laravel has a File Validation Bypass
Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...
RHSA-2025:3828 Red Hat Security Advisory: glibc security update
Bulletin has no description...
SUSE-SU-2025:1238-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506002330 fixes one issue. The following security issue was fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6create bsc1235218...
CVE-2025-24859
CVE-2025-24859 affects Apache Roller
PT-2025-16228 · Softcom · Softcom Iksoris Internet Starter
Name of the Vulnerable Software and Affected Versions: SoftCOM iKSORIS Internet Starter versions prior to 79.0 Description: The issue is related to Reflected XSS Cross-site Scripting attacks. An attacker might trick a user into filling a form designed for adding users with a malicious script, whi...
PT-2025-16540 · Unknown · Ashauthentication
Name of the Vulnerable Software and Affected Versions: Ash Authentication versions prior to 4.7.0 Description: The confirmation flow for account creation in Ash Authentication uses a GET request triggered by clicking a link sent via email. Some email clients and security tools may automatically...
PT-2025-16234 · Softcom · Softcom Iksoris Internet Starter
Name of the Vulnerable Software and Affected Versions: SoftCOM iKSORIS Internet Starter versions prior to 79.0 Description: The issue allows an attacker with access to a user's browser to set an arbitrary session cookie value, potentially leading to account takeover. The system's failure to destr...
PT-2025-16268 · Ibm · Ibm Aspera Console
Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM...
PT-2025-16242 · Ibm · Ibm Robotic Process Automation For Cloud Pak +1
Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7.20 IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak versions 23.0.0 through 23.0.20 Description: The issue...
PT-2025-16236 · Projectworlds · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: projectworlds Online Food Ordering System version 1.0 Apache Struts versions 2.5.26 and earlier Description: A critical issue has been found, allowing for remote exploitation. In the case of projectworlds Online Food Ordering System, an unkno...
DSA-5902-1 perl - security update
Bulletin has no description...
PT-2025-16181 · Shuanx · Burpapifinder
Name of the Vulnerable Software and Affected Versions: shuanx BurpAPIFinder versions up to 2.0.2 Description: A vulnerability has been found in shuanx BurpAPIFinder, affecting an unknown functionality of the file BurpApiFinder.db. The manipulation leads to denial of service. The attack can be...
DLA-4126-1 jinja2 - security update
Bulletin has no description...
CGA-43X3-MXJ2-GPJF
Bulletin has no description...