RHSA-2025:7437 Red Hat Security Advisory: avahi security update

Bulletin has no description...

RHSA-2025:7433 Red Hat Security Advisory: nodejs:22 security update

Bulletin has no description...

RHSA-2025:7435 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:7426 Red Hat Security Advisory: nodejs:20 security update

Bulletin has no description...

RHSA-2025:7425 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:7417 Red Hat Security Advisory: gimp security update

Bulletin has no description...

RHSA-2025:7397 Red Hat Security Advisory: skopeo security update

Bulletin has no description...

RHSA-2025:7350 Red Hat Security Advisory: perl-Module-ScanDeps security update

Bulletin has no description...

RHSA-2025:7317 Red Hat Security Advisory: python3.12-cryptography security update

Bulletin has no description...

RHSA-2025:7256 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2025:7163 Red Hat Security Advisory: xorg-x11-server security update

Bulletin has no description...

RHSA-2025:7165 Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Bulletin has no description...

Vulnerabilities fixed in Adobe Animate

Adobe has fixed vulnerabilities in Animate versions 24.0.8, 23.0.11 and earlier. The vulnerabilities include a critical vulnerability that allows arbitrary code execution via an out-of-bounds write, a NULL Pointer Dereference that can lead to application crashes, and several integer-related...

CVE-2024-52290 Stored XSS in Configuration Key Functionality

LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...

PT-2025-21227 · Ibm · Ibm Semeru Runtime

Name of the Vulnerable Software and Affected Versions: IBM Semeru Runtime versions 8.0.302.0 through 8.0.442.0 IBM Semeru Runtime versions 11.0.12.0 through 11.0.26.0 IBM Semeru Runtime versions 17.0.0.0 through 17.0.14.0 IBM Semeru Runtime versions 21.0.0.0 through 12.0.6.0 Description: The issu...

PT-2025-21226 · Unknown · Bonigarcia Webdrivermanager

Name of the Vulnerable Software and Affected Versions: bonigarcia webdrivermanager versions 1.0.0 through 6.0.2 Description: The issue is related to an Improper Restriction of XML External Entity Reference, allowing Data Serialization External Entities Blowup. This affects the XML parsing...

PT-2025-22284

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.1.76253 Description The issue is related to missing permission checks in the API, which allowed deletion of issues. Recommendations For versions prior to 2025.1.76253, update to version 2025.1.76253 or...

PT-2025-21195 · Drupal · Enterprise Mfa - Tfa For Drupal

Name of the Vulnerable Software and Affected Versions: Enterprise MFA - TFA for Drupal versions 0.0.0 through 4.6.x Enterprise MFA - TFA for Drupal versions 5.0.0 through 5.1.x Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in...

PT-2025-21222 · Dlib · Dlib

Name of the Vulnerable Software and Affected Versions: dlib versions prior to 19.24.7 Description: The issue allows remote attackers to cause a denial of service via a crafted file. This is a Divide By Zero vulnerability. Recommendations: For versions prior to 19.24.7, update to version 19.24.7 o...

PT-2025-21218

Name of the Vulnerable Software and Affected Versions: a-blog cms versions prior to 3.1.43 a-blog cms versions prior to 3.0.47 Description: A cross-site scripting issue exists in a specific field in the entry editing screen of a-blog cms, requiring contributor or higher level privileges to exploi...