BELL-CVE-2023-52923

Bulletin has no description...

PT-2025-4239

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1 Oracle GraalVM for JDK versions 17.0.13, 21.0.5, 23.0.1 Oracle GraalVM Enterprise Edition versions 20.3.16, 21.3.12 Description A difficult to exploit vulnerability allows...

PT-2025-4264 · Oracle · Oracle Communications Order/Service Management

Name of the Vulnerable Software and Affected Versions: Oracle Communications Order and Service Management versions 7.4.0 through 7.5.0 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful...

DSA-5847-1 snapcast - security update

Bulletin has no description...

JVN#83855727: FortiWeb vulnerable to SQL injection

FortiWeb provided by Fortinet, Inc. contains an SQL injection vulnerability CWE-89, CVE-2024-55593. Impact Information in the FortiWeb database may be obtained by a user who can log in to the product. Solution Update the software Update the software to the latest version according to the...

PT-2025-4836

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 3.5.10 Apache CXF versions prior to 3.6.5 Apache CXF versions prior to 4.0.6 Description A potential denial of service issue is present in Apache CXF. In some edge cases, the CachedOutputStream instances may not be...

DLA-4026-1 tiff - security update

Bulletin has no description...

[SECURITY] [DLA 4022-1] tryton-server security update

Debian LTS Advisory DLA-4022-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert January 19, 2025 https://wiki.debian.org/LTS Package : tryton-server Version : 5.0.33-2+deb11u3 CVE ID : not yet available Debian Bug : none Cédric Krier has found that trytond, the Tryt...

DLA-4020-1 libreoffice - security update

Bulletin has no description...

SUSE-SU-2025:0167-1 Security update for pam_u2f

This update for pamu2f fixes the following issues: - CVE-2025-23013: Fixed problematic PAMIGNORE return values in pamsmauthenticate bsc1233517...

RHSA-2025:0381 Red Hat Security Advisory: .NET 8.0 security update

Bulletin has no description...

PT-2025-2393 · Etic Telecom · Etic Telecom Remote Access Server

Name of the Vulnerable Software and Affected Versions: ETIC Telecom Remote Access Server RAS versions prior to 4.5.0 Description: The issue concerns reflected cross site scripting XSS attacks. This occurs in the get view method under the view parameter. The ETIC RAS web server uses dynamic pages...

PT-2025-2389 · Etic Telecom · Etic Telecom Remote Access Server

Name of the Vulnerable Software and Affected Versions: ETIC Telecom Remote Access Server RAS versions prior to 4.9.19 Description: The issue allows an external attacker with no access to the device to force the end user into submitting a "setconf" method request, which can lead to denial of servi...

DSA-5845-1 tomcat10 - security update

Bulletin has no description...

openSUSE Security Advisory (SUSE-SU-2025:0142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CGA-58GC-R4XX-4MMW

Bulletin has no description...

RHSA-2025:0335 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

PT-2025-2609 · Ibm · Ibm Cics Tx Advanced +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Advanced versions 10.1 through 11.1 IBM CICS TX Standard version 11.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

PT-2025-3755 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace App for macOS versions prior to 6.2.10 Description: The issue allows an authenticated user to conduct a denial of service via local access due to symlink following in the installer. Recommendations: For versions prior to 6.2.10...

TrueFiling authorization bypass via user-controlled keys

RISK EVALUATION TrueFiling trusts some client-controlled identifiers passed in URL requests to retrieve information. Platform users must self-register for an account, and once authenticated, could manipulate those identifiers to gain partial access to case information and the ability to...