RHSA-2025:3076 Red Hat Security Advisory: php:7.4 security update

Bulletin has no description...

CVE-2025-2555 Audi Universal Traffic Recorder App FTP Credentials hard-coded password

A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2.0. Affected is an unknown function of the component FTP Credentials. The manipulation leads to use of hard-coded password. Attacking locally is a requirement. The complexity of an attack is rather...

RHSA-2025:3063 Red Hat Security Advisory: postgresql:12 security update

Bulletin has no description...

RHSA-2025:2712 Red Hat Security Advisory: OpenShift Container Platform 4.14.49 packages and security update

Bulletin has no description...

CVE-2024-12029 Remote Code Execution via Model Deserialization in invoke-ai/invokeai

A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious cod...

DLA-4087-1 python3.9 - security update

Bulletin has no description...

PT-2025-12118 · Ollama · Ollama

Name of the Vulnerable Software and Affected Versions: Ollama versions =0.3.14 Description: A malicious user can create a customized gguf model file that can be uploaded to the public Ollama server, causing it to crash and leading to a Denial of Service DoS attack. The root cause of the issue is ...

PT-2025-12226 · Mintplex · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm version git 6dc3642 through version prior to 1.2.2 Description: The issue is related to an unauthenticated Denial of Service DoS vulnerability in the API for the embeddable chat functionality. An attacker can exploi...

PT-2025-12280 · Unknown · Transformeroptimus/Superagi

Name of the Vulnerable Software and Affected Versions: transformeroptimus/superagi version 0.0.14 Description: A Path Traversal vulnerability exists in the file upload functionality. This vulnerability allows an attacker to upload an arbitrary file to the server, potentially leading to remote cod...

PT-2025-12114

Name of the Vulnerable Software and Affected Versions run-llama/llama index versions prior to v0.4.0 Description A SQL injection vulnerability exists in the duckdb retriever component. The issue stems from constructing SQL queries without utilizing prepared statements, which allows for the...

PT-2025-12158

Name of the Vulnerable Software and Affected Versions llama index versions prior to 0.5.1 llama index versions prior to 0.12.3 Description A vulnerability exists in the default jsonalyzer function of the JSONalyzeQueryEngine. This allows for SQL injection via prompt injection, potentially leading...

CVE-2025-29925 XWiki allows unregistered users to access private pages information through REST endpoint

XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST endpoints /rest/wikis/wikiName/pages even if the user doesn't have view rights on them. It's particularly true if the entire wiki is protected with "Prevent...

SUSE-SU-2025:0959-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2025-26699: Fixed potential denial-of-service in django.utils.text.wrap bsc1239052...

RHSA-2025:3027 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2025:3021 Red Hat Security Advisory: kernel security update

Bulletin has no description...

SUSE-SU-2025:0920-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005568 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpioid before used as array index bsc1231204. - CVE-2024-46815: drm/amd/display: Check numvalidsets before accessing readerwmsets bsc1231196...

RHSA-2025:3017 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2025:3002 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

PT-2025-11688 · Ipswitch · Moveit Transfer

Name of the Vulnerable Software and Affected Versions: MOVEit Transfer versions 2023.1.0 through 2023.1.11 MOVEit Transfer versions 2024.0.0 through 2024.0.7 MOVEit Transfer versions 2024.1.0 through 2024.1.1 Description: The issue is related to Improper Privilege Management for users configured ...

PT-2025-16819 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...