PT-2025-13979 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to potentially gain root privileges...

PT-2025-13659 · Wpquads · Wpquads

Name of the Vulnerable Software and Affected Versions: Ads by WPQuads versions through 2.0.87.1 Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through 2.0.87....

PT-2025-13865 · Drupal · Drupal Link Field Display Mode Formatter

Name of the Vulnerable Software and Affected Versions: Drupal Link field display mode formatter versions 0.0.0 through 1.6.0 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, in the Drupal Link field displa...

PT-2025-13761 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: Varnish WordPress versions 1.7 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. The estimated number of potentially affected devices worldwide is not specified. There is no...

PT-2025-13916 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: A malicious app may be able to gain root privileges due to a vulnerability in the code. The estimated number of...

PT-2025-13926 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description...

PT-2025-13992 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue may allow an app to cause unexpected...

PT-2025-13803

Name of the Vulnerable Software and Affected Versions Xorcom CompletePBX versions prior to 5.2.35 Description The issue affects the Diagnostics reporting module, allowing for path traversal. This enables the reading of arbitrary files and the deletion of any retrieved file in place of the expecte...

DLA-4098-1 amd64-microcode - security update

Bulletin has no description...

OESA-2025-1329 zvbi security update

The ZVBI library provides functions to read from Linux V4L, V4L2 and FreeBSD BKTR raw VBI capture devices, from Linux DVB devices and from a VBI proxy to share V4L and V4L2 VBI devices between multiple applications. It can demodulate raw to sliced VBI data in software, with support for a wide ran...

istioctl-1.25.1-1.1 on GA media (moderate)

istioctl-1.25.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14938-1 Rating: moderate Cross-References: CVE-2025-30157 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

DLA-4095-1 intel-microcode - security update

Bulletin has no description...

SUSE-SU-2025:1052-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250326T201520 2025-03-26T20:15:20Z jscPED-11136: GO-2025-3520 GO-2025-3521 GO-2025-3522 GO-2025-3533 GO-2025-3534 GO-2025-3536 GO-2025-3537 GO-2025-3538 GO-2025-3539 GO-2025-3540 GO-2025-3542 GO-2025-3543...

RHSA-2025:3344 Red Hat Security Advisory: grafana security update

Bulletin has no description...

RHSA-2025:3335 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

BIT-MATTERMOST-2025-24920

Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8, 10.5.x = 10.5.0 fail to restrict bookmark creation and updates in archived channels, which allows authenticated users created or update bookmarked in archived channels...

PT-2025-13543 · Ericsson +6 · Erlang/Otp +6

Name of the Vulnerable Software and Affected Versions: Erlang/OTP versions prior to 27.3.1 Erlang/OTP versions prior to 26.2.5.10 Erlang/OTP versions prior to 25.3.2.19 Description: A maliciously formed KEX init message can result in high memory usage due to the implementation not verifying RFC...

PT-2025-13522 · W3Css · W3Css Validator

Name of the Vulnerable Software and Affected Versions: W3CSS Validator versions before cssval-20250226 Description: The issue is related to an XXE XML External Entity attack in the W3CSS Validator, which allows an attacker to use specially-crafted XML objects to coerce server-side request forgery...

OPENSUSE-SU-2025:14940-1 podman-5.4.1-3.1 on GA media

These are all security issues fixed in the podman-5.4.1-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-13419 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow an unauthenticated attacker with remote access...