CVE-2025-25063

An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently validate uploaded SVG images to ensure they do not contain potentially dangerous SVG tags. SVG images can contain clickable links and executable scripting, and using a crafted SVG, ...

CVE-2024-53994

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable...

SUSE-SU-2025:0384-1 Security update for bind

This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596...

RHSA-2025:1138 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2025:1096 Red Hat Security Advisory: ovn24.03 security update

Bulletin has no description...

RHSA-2025:1093 Red Hat Security Advisory: ovn23.03 security update

Bulletin has no description...

RHSA-2025:1091 Red Hat Security Advisory: ovn22.09 security update

Bulletin has no description...

RHSA-2025:1087 Red Hat Security Advisory: ovn23.03 security update

Bulletin has no description...

RHSA-2025:1086 Red Hat Security Advisory: ovn22.12 security update

Bulletin has no description...

RHSA-2025:1084 Red Hat Security Advisory: ovn22.06 security update

Bulletin has no description...

RHSA-2025:1066 Red Hat Security Advisory: firefox security update

Bulletin has no description...

BIT-GITLAB-2024-1539 Missing Authorization in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to disclose updates to issues to a banned group member using the API...

DLA-4044-1 firefox-esr - security update

Bulletin has no description...

DSA-5861-1 thunderbird - security update

Bulletin has no description...

PT-2025-5926 · Unknown · Breaking News Ticker

Name of the Vulnerable Software and Affected Versions: Breaking News Ticker versions n/a through 2.4.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

CVE-2023-5878

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

SUSE-SU-2025:0380-1 Security update for wget

This update for wget fixes the following issues: - CVE-2021-31879: Authorization header disclosed upon redirects to different origins. bsc1185551...

CVE-2021-37626

Contao is an open source CMS that allows you to create websites and scalable web applications. In affected versions it is possible to load PHP files by entering insert tags in the Contao back end. Installations are only affected if they have untrusted back end users who have the rights to modify...

CVE-2021-37627

Contao is an open source CMS that allows creation of websites and scalable web applications. In affected versions it is possible to gain privileged rights in the Contao back end. Installations are only affected if they have untrusted back end users who have access to the form generator. All users...

CVE-2021-37647

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...