RHSA-2025:1342 Red Hat Security Advisory: gcc-toolset-13-gcc security update

Bulletin has no description...

JVN#84319378: acmailer vulnerable to cross-site scripting

acmailer provided by Extra Innovation Inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who accessed the management page of the affected product. Solution Update the software Update the software to the latest versi...

PT-2025-6781 · Progress · In Progress Telerik Ui For Winforms

Name of the Vulnerable Software and Affected Versions: In Progress Telerik UI for WinForms versions prior to 2025 Q1 2025.1.211 Description: The issue is related to the improper limitation of a target path, which can lead to decompressing an archive's content into a restricted directory. This can...

PT-2025-6862 · Ywoa · Ywoa

Name of the Vulnerable Software and Affected Versions: ywoa versions up to 2024.07.03 Description: A critical issue has been identified, affecting unknown code in the /oa/setup/setup.jsp file. This leads to improper authorization and can be exploited remotely. The issue has been publicly disclose...

PT-2025-7162

Name of the Vulnerable Software and Affected Versions: Q-Free MaxTime versions 2.11.0 and earlier Description: The issue is related to a missing authorization error, allowing an authenticated attacker with low privileges to enumerate users through crafted HTTP requests to the...

PT-2025-6837 · Crowdstrike · Falcon Sensor For Linux +2

Name of the Vulnerable Software and Affected Versions: Falcon Sensor for Linux versions prior to 7.06 Falcon Kubernetes Admission Controller versions prior to 7.06 Falcon Container Sensor versions prior to 7.06 Description: The issue is related to a validation logic error in the TLS connection...

PT-2025-13850

Name of the Vulnerable Software and Affected Versions Open Social versions 0.0.0 through 12.3.10 Open Social versions 12.4.0 through 12.4.9 Description The issue is related to a Missing Authorization vulnerability in Drupal Open Social, which allows Forceful Browsing. Recommendations For Open...

OPENSUSE-SU-2025:14768-1 grafana-11.5.1-1.1 on GA media

These are all security issues fixed in the grafana-11.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

Advisory ROSA-SA-2025-2679

Software: curl 7.61.1 OS: ROSA Virtualization 3.0 packageevrstring: curl-7.61.1-33.0.2 CVE-ID: CVE-2022-32221 BDU-ID: 2022-07403 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the cURL command line utility is related to a logical error in the reused descriptor when processing subsequent PUT an...

CVE-2025-24896 Misskey allows token to remain valid in cookie after signing out

Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, a login token named token is stored in a cookie for authentication purposes in Bull Dashboard, but this remains undeleted even after logout is performed. The primary...

Security Advisory Ivanti Cloud Services Application (CSA) (CVE-2024-47908, CVE-2024-11771)

Summary Ivanti has released updates for Ivanti Cloud Services Application CSA which addresses critical and medium severity vulnerabilities. Successful exploitation of CVE-2024-47908 could allow a remote authenticated attacker to achieve remote code execution and CVE-2024-11771 could allow a remot...

RHSA-2025:1262 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2025:1216 Red Hat Security Advisory: tbb security update

Bulletin has no description...

RHSA-2025:1214 Red Hat Security Advisory: tbb security update

Bulletin has no description...

RHSA-2025:1213 Red Hat Security Advisory: tbb security update

Bulletin has no description...

Security Bulletin: NVIDIA Triton Inference Server - February 2025

NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, download and install the latest release from the Triton Inference Server Releases page on GitHub and view the Secure Deployment Considerations Guide. Go to NVIDIA Product Security...

Security Bulletin: NVIDIA Container Toolkit - 11 February 2025

NVIDIA has released a software update for NVIDIA® Container Toolkit and NVIDIA GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product...

Intel Ethernet I219 Software February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in Intel® Ethernet Connection I219 Series, which might allow denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP has identifi...

Intel® Chipset Software Installation Utility Advisory

Summary: A potential security vulnerability in some Intel® Chipset Software Installation Utility may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-36291 Description: Uncontrolled search path for...

Intel® Driver Support Assistant Software Advisory

Summary: A potential security vulnerability in some Intel® Driver Support Assistant Intel® DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39805 Description: Insufficient...