12569 matches found
MINI-2WH7-V592-VHCJ
Bulletin has no description...
MGASA-2025-0185 Updated roundcubemail packages fix security vulnerability
A Post-Auth RCE was announced and fixed in the latest release...
CVE-2025-49006
Wasp Web Application Specification is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6, Wasp authentication has a vulnerability in the OAuth authentication implementation affecting only Keycloak with a specific config. Wasp currently lowercases OAuth user IDs before...
RHSA-2025:8812 Red Hat Security Advisory: .NET 8.0 security update
Bulletin has no description...
RHSA-2025:8784 Red Hat Security Advisory: thunderbird security update
Bulletin has no description...
RHSA-2025:8737 Red Hat Security Advisory: golang security update
Bulletin has no description...
CVE-2025-5991
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a POST request and the simultaneous...
[SECURITY] Fedora 42 Update: qt6-qtwebsockets-6.9.1-1.fc42
The QtWebSockets module implements the WebSocket protocol as specified in RFC 6455. It solely depends on Qt no external dependencies...
[SECURITY] Fedora 42 Update: libqtxdg-4.1.0-6.fc42
QtXdg, a Qt5 implementation of XDG standards...
Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the software update verification process. The issue results fr...
PT-2025-25235 · Palo Alto Networks · Globalprotect
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect versions prior to 6.2.8-h2 on macOS Description: An improper neutralization of wildcards vulnerability in the log collection feature of the Palo Alto Networks GlobalProtect app on macOS allows a...
PT-2025-25366 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.11 before 17.11.4 and 18.0 before 18.0.2 Description: A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group. The vulnerability in GitLa...
PT-2025-25220 · Drupal · Drupal Commerce Eurobank
Name of the Vulnerable Software and Affected Versions: Drupal Commerce Eurobank Redirect versions 0.0.0 through 2.1.0 Description: The issue is related to an Incorrect Authorization vulnerability, allowing functionality misuse. Recommendations: For versions 0.0.0 through 2.1.0, update to version...
DLA-4214-1 node-tar-fs - security update
Bulletin has no description...
PT-2025-25260 · Pioneers · Dmh-Wt7600Nex +1
Name of the Vulnerable Software and Affected Versions: Pioneer DMH-WT7600NEX affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. The flaw exists within the software update...
PT-2025-25286 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.13 through 17.10.7 GitLab CE/EE versions 17.11 through 17.11.3 GitLab CE/EE versions 18.0 through 18.0.1 Description: An issue has been discovered in GitLab CE/EE, where a lack of input validation in Board Names could ...
ALSA-2025:8815 Important: .NET 9.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Securi...
RHSA-2025:8683 Red Hat Security Advisory: grafana security update
Bulletin has no description...