Medium: clamav1.4

Issue Overview: A vulnerability in the Object Linking and Embedding 2 OLE2 decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer underflow in a bounds check that allows...

PT-2025-9898 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds read in parsing image data, allowing local attackers to access out-of-bounds memory. Recommendations: For versions prior to 4.4.26.71, update to...

PT-2025-9903 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds read in the parsing of RLE Run-Length Encoding of BMP images. This allows local attackers to read out-of-bounds memory, potentially leading to...

PT-2025-9888 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds read when applying binary of pdf content. This allows attackers to read out-of-bounds memory. Recommendations: For versions prior to 4.4.26.71,...

PT-2025-9994

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.19 Django versions 5.0 through 5.0.12 Django versions 5.1 through 5.1.6 Description A potential denial-of-service attack can occur when the django.utils.text.wrap method and wordwrap template filter are used wit...

PT-2025-9890 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds read when applying binary of video content. This allows attackers to read out-of-bounds memory. Recommendations: For versions prior to 4.4.26.71,...

PT-2025-9889 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds read in applying extra data of base content. This allows attackers to read out-of-bounds memory. Recommendations: For versions prior to 4.4.26.71,...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2025:0783-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0783-1 advisory. Security Vulnerabilities fixed in Firefox ESR 128.8 MFSA 2025-16 bsc1237683 - CVE-2024-43097: Overflow when growing an SkRegion's RunArray -...

CVE-2025-27499

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting XSS vulnerability was identified in the processaedicaosocio.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the...

CVE-2025-27421

Abacus is a highly scalable and stateless counting API. A critical goroutine leak vulnerability has been identified in the Abacus server's Server-Sent Events SSE implementation. The issue occurs when clients disconnect from the /stream endpoint, as the server fails to properly clean up resources...

RHSA-2025:2221 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update

Bulletin has no description...

RHSA-2025:2219 Red Hat Security Advisory: Red Hat Product OCP Tools 4.16 Openshift Jenkins security update

Bulletin has no description...

RHSA-2025:1908 Red Hat Security Advisory: OpenShift Container Platform 4.18.2 packages and security update

Bulletin has no description...

PT-2025-9750 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 Description: The issue concerns a hardcoded AWS API key. Recommendations: For versions prior to Virtual Appliance Host 22.0.933...

DSA-5874-1 firefox-esr - security update

Bulletin has no description...

PT-2025-9747 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.1002 Application 20.0.2614 Description: The issue allows SQL Injection. Recommendations: For versions prior to Virtual Appliance Host 22.0.1002 Application...

PT-2025-9862 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.499 and earlier, LTS 2.492.1 and earlier Description: The issue allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site. This is because browsers interpret...

PT-2025-9749 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 Description: The issue allows unauthenticated editing of driver packages. Recommendations: For versions prior to Virtual Appliance Host...

CGA-8QCX-XRM8-V435

Bulletin has no description...

Cisco Webex for BroadWorks Credential Exposure Vulnerability

A low-severity vulnerability in Cisco Webex for BroadWorks Release 45.2 could allow an unauthenticated, remote attacker to access data and credentials if unsecure transport is configured for SIP communication. This vulnerability is due to the exposure of sensitive information in the SIP headers. ...