RHSA-2025:2521 Red Hat Security Advisory: grub2 security update

Bulletin has no description...

RHSA-2025:2512 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2025:2502 Red Hat Security Advisory: tigervnc security update

Bulletin has no description...

PT-2025-10862 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Substance3D - Sampler versions 4.5.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Security Bulletin: NVIDIA NeMo - March 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest release from the NeMo-Framework-Launcher Releases page on GitHub. Go to NVIDIA Product Security...

PT-2025-10922 · Unknown · Shanebp Bp Email Assign Templates

Name of the Vulnerable Software and Affected Versions: shanebp BP Email Assign Templates versions 1.6 and earlier Description: The issue affects the security of shanebp BP Email Assign Templates by allowing an authorization bypass through a user-controlled key. This exploit takes advantage of...

PT-2025-10804 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: A heap-based buffer overflow issue in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a...

PT-2025-10886 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-10861 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Substance3D - Sampler versions 4.5.2 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction,...

DLA-4084-1 libmodbus - security update

Bulletin has no description...

CVE-2022-43454

A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-52812 LF Edge eKuiper has Stored XSS in Rules Functionality

LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service e.g. kuiperUser role can inject a cross-site scripting payload into the rule id parameter. Then, after any user with access to this service e.g...

RHSA-2025:2489 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2025:2475 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CVE-2024-53697

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vulnerability in the following versions...

CVE-2024-53696

A server-side request forgery SSRF vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read application data. We have already fixed the vulnerability in the following versions: QuLog Center...

CVE-2024-50394

An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: Helpdesk 3.3.3 and later...

Advisory ROSA-SA-2025-2769

Software: python-jinja2 2.10.1 OS: ROSA Virtualization 3.0 packageevrstring: python-jinja2-2.10.1-5.rv30 CVE-ID: CVE-2024-22195 BDU-ID: 2024-00884 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the xmlattr filter of the Jinja2 templating engine for the Python programming language is related to a...

CVE-2025-20915

Out-of-bounds read in applying binary of voice content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

CVE-2025-27508

Emissary is a P2P based data-driven workflow engine. The ChecksumCalculator class within allows for hashing and checksum generation, but it includes or defaults to algorithms that are no longer recommended for secure cryptographic use cases e.g., SHA-1, CRC32, and SSDEEP. These algorithms, while...