12715 matches found
ALSA-2025:10676 Moderate: golang security update
The golang packages provide the Go programming language compiler. Security Fixes: net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
PT-2025-29240 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.2R3-S9 Juniper Networks Junos OS versions 21.4 before 21.4R3-S11 Juniper Networks Junos OS versions 22.2 before 22.2R3-S7 Juniper Networks Junos OS versions 22.4 before 22.4R3-S7 Juniper Networks...
PT-2025-28929 · Jenkins · Jenkins Xooa Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Xooa Plugin versions 0.0.7 and earlier Description: The Jenkins Xooa Plugin does not mask the Xooa Deployment Token on the global configuration form, potentially allowing attackers to observe and capture it. Recommendations: Update to...
PT-2025-28966 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions prior to 7.0.4 Description: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is susceptible to Reflected Cross-Site Scriptin...
PT-2025-28955
Name of the Vulnerable Software and Affected Versions Drupal Mail Login versions 3.0.0 through 3.1.x Drupal Mail Login versions 4.0.0 through 4.1.x Description An improper restriction of excessive authentication attempts exists in Drupal Mail Login, allowing for brute force attacks. Recommendatio...
PT-2025-30492
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 138.0.7204.168 Microsoft Edge versions prior to 138.0.7204.168 Chromium versions prior to 138.0.7204.168 Chromium versions 138.0.7204.168-1deb12u1 Description A type confusion issue exists in the V8 JavaScript...
PT-2025-28910 · Jenkins · Jenkins Applitools Eyes Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier Description: The Jenkins Applitools Eyes Plugin does not properly escape the Applitools URL displayed on the build page, leading to a stored cross-site scripting XSS issue. An attacke...
PT-2025-29241 · Juniper Networks · Junos Evolved
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 22.2R3-S7-EVO Juniper Networks Junos OS Evolved versions 22.4 through 22.4R3-S7-EVO Juniper Networks Junos OS Evolved versions 23.2 through 23.2R2-S4-EVO Juniper Networks Junos OS Evolved...
PT-2025-29254
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.2R3-S9 Juniper Networks Junos OS versions 21.4 prior to 21.4R3-S10 Juniper Networks Junos OS versions 22.2 prior to 22.2R3-S6 Juniper Networks Junos OS versions 22.4 prior to 22.4R3-S6 Juniper...
PT-2025-28902 · Jenkins · Jenkins Credentials Binding Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Credentials Binding Plugin versions 687.v619cb 15e923f and earlier Description: The Jenkins Credentials Binding Plugin does not properly mask credentials present in exception error messages written to the build log. This can lead to t...
PT-2025-28941
Name of the Vulnerable Software and Affected Versions: Ameba-AIoT ameba-arduino-d versions prior to 3.1.9 ameba-rtos-d versions prior to commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a Description: A heap-based buffer overflow exists in the WLAN driver defragment function due to a lack of...
CVE-2025-48384 Git allows arbitrary code execution through broken config quoting
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config entry, values with ...
RHSA-2025:10410 Red Hat Security Advisory: tigervnc security update
Bulletin has no description...
RHSA-2025:10407 Red Hat Security Advisory: python-setuptools security update
Bulletin has no description...
RHBA-2025:6470 Red Hat Bug Fix Advisory: rsync bug fix and enhancement update
Bulletin has no description...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in jsonpath-plus-0.19.0.tgz
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of jsonpath-plus-0.19.0.tgz Vulnerability Details CVEID:CVE-2024-21534 DESCRIPTION: All versions of the package jsonpath-plus are vulnerable to Remote Code Execution RCE due to improper input sanitization. An attacker can...
PT-2025-28401 · Siemens · Ruggedcom I802 +49
Name of the Vulnerable Software and Affected Versions: RUGGEDCOM i800 versions prior to V5.10.0 RUGGEDCOM i801 versions prior to V5.10.0 RUGGEDCOM i802 versions prior to V5.10.0 RUGGEDCOM i803 versions prior to V5.10.0 RUGGEDCOM M2100 versions prior to V5.10.0 RUGGEDCOM M2200 versions prior to...
PT-2025-28397 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge SE2025 versions prior to V225.0 Update 5 Description: A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR...
PT-2025-28770 · Adobe · Illustrator
Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator versions 28.7.6 and 29.5.1, and earlier, are affected by an out-of-bounds read issue that may result in the disclosure of sensitive memory...
