RHSA-2025:10180 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2025:10162 Red Hat Security Advisory: microcode_ctl security update

Bulletin has no description...

RHSA-2025:10164 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:10128 Red Hat Security Advisory: python3 security update

Bulletin has no description...

RHSA-2025:10111 Red Hat Security Advisory: microcode_ctl security update

Bulletin has no description...

RHSA-2025:10107 Red Hat Security Advisory: microcode_ctl security update

Bulletin has no description...

RHSA-2025:10024 Red Hat Security Advisory: pam security update

Bulletin has no description...

CVE-2025-24333 Administrative user shell input validation fault

Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell input validation fault, which authenticated admin user can, in theory, potentially use for injecting arbitrary commands for unprivileged baseband OAM service process execution via special characters added...

Multiple vulnerabilities in Active! mail

Overview Active! mail provided by QUALITIA CO., LTD. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2025-52462 Cross-site request forgery CSRF CWE-352 - CVE-2025-52463 Rintaro Fujita and Shoji Baba of GAKUSHUIN UNIVERSITY reported these vulnerabilities to IPA...

CGA-VC6M-FFW4-WWQW

Bulletin has no description...

PT-2025-27606 · Nokia · Nokia Single Ran Baseband Oam Service

Name of the Vulnerable Software and Affected Versions: Nokia Single RAN baseband OAM service component versions prior to 24R1-SR 1.0 MP Description: The issue occurs when a crafted SOAP "set" operation message is sent within the Mobile Network Operator MNO internal Radio Access Network RAN...

PT-2025-27583 · One Identity · One Identity Onelogin Active Directory Connector

Name of the Vulnerable Software and Affected Versions: One Identity OneLogin Active Directory Connector versions prior to 6.1.5 Description: The issue concerns the mishandling of DirectoryToken encryption, also known as ST-812. This problem occurred due to an error in the encryption process...

PT-2025-27599 · Unknown · Active! Mail 6

Name of the Vulnerable Software and Affected Versions: Active! mail 6 versions 6.30.01004145 through 6.60.06008562 Description: A cross-site scripting issue exists, allowing an arbitrary script to be executed on the logged-in user's web browser when accessing a specially crafted URL...

HP Device Manager Vulnerability Update (5.0.15)

Potential vulnerabilities have been identified in HP Device Manager versions prior to HPDM 5.0.15. HP is releasing mitigation for the potential vulnerabilities as part of 5.0.15 release. All of the identified vulnerabilities listed above were addressed and fixed as part of HP Device Manager 5.0.1...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2025-182-01)

The version of mozilla-thunderbird installed on the remote host is prior to 140.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-182-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

PT-2025-27611 · Nokia · Nokia Single Ran Baseband

Name of the Vulnerable Software and Affected Versions: Nokia Single RAN baseband software versions prior to 24R1-SR 1.0 MP Description: The issue is related to an administrative shell input validation fault in the Nokia Single RAN baseband software. An authenticated admin user can potentially...

JVN#89505333: Multiple vulnerabilities in Active! mail

Active! mail provided by QUALITIA CO., LTD. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Base Score 6.1 CVE-2025-52462 Cross-site request...

PT-2025-28029

Name of the Vulnerable Software and Affected Versions Alinto SOPE SOGo versions 2.0.2 through 5.12.2 Description This issue involves a NULL pointer dereference in sope-core/NGExtensions/NGHashMap.m that can lead to a crash of the SOGo application. The vulnerability occurs when a request contains ...

PT-2025-29422 · Lb Link +1 · Lb-Link Bl-Ac3600 +6

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-AC1900 LB-LINK BL-AC2100 AZ3 LB-LINK BL-AC3600 LB-LINK BL-AX1800 LB-LINK BL-AX5400P LB-LINK BL-WR9000 versions up to 20250702 Description: A critical vulnerability exists that leads to information disclosure. The vulnerability...

PT-2025-27591 · WordPress · Ads Pro Plugin

Name of the Vulnerable Software and Affected Versions: Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager versions up to 4.89 Description: The issue is related to a time-based SQL injection vulnerability. It occurs due to insufficient escaping of the user-supplied bsa pro id parameter a...