OPENSUSE-SU-2025:0025-1 Security update for cheat

This update for cheat fixes the following issues: - Update to 4.4.2: Bump chroma to newest version Remove plan9 support due to build failure Upgrade to yaml.v3 - Update to 4.4.1: Update dependencies Make minor changes to appease revive linter...

RHSA-2025:0595 Red Hat Security Advisory: redis:6 security update

Bulletin has no description...

RHSA-2025:0426 Red Hat Security Advisory: java-21-openjdk security update for RHEL 8.10, 9.4 and 9.5

Bulletin has no description...

CVE-2024-53299 Apache Wicket: An attacker can intentionally trigger a memory leak

The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue...

PT-2025-32000 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 1.1 through 16.4.6 XWiki Platform versions 16.5.0-rc-1 through 16.10.4 XWiki Platform versions 17.0.0-rc-1 through 17.1.0 Description: XWiki Platform Legacy Old Core and XWiki Platform Old Core are affected by an issue...

PT-2025-4861 · Ibm · Ibm Tivoli Application Dependency Discovery Manager

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Application Dependency Discovery Manager versions 7.3.0.0 through 7.3.0.11 Description: This issue allows authenticated users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and...

CVE-2025-24027 ps_contactinfo has potential XSS due to usage of the nofilter tag in template

pscontactinfo, a PrestaShop module for displaying store contact information, has a cross-site scripting XSS vulnerability in versions up to and including 3.3.2. This can not be exploited in a fresh install of PrestaShop, only shops made vulnerable by third party modules are concerned. For example...

PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack

A previously undocumented China-aligned advanced persistent threat APT group named PlushDaemon has been linked to a supply chain attack targeting a South Korean virtual private network VPN provider in 2023, according to new findings from ESET. "The attackers replaced the legitimate installer with...

PT-2025-4145 · Cisco · Cisco Meeting Management

The vulnerable software is Cisco Meeting Management, which has a flaw in its REST API that allows a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This is possible due to improper authorization enforcement, which can be exploited b...

PT-2025-5098 · Unknown +1 · Buddypress +1

Name of the Vulnerable Software and Affected Versions: Eliott Robson Mass Messaging in BuddyPress versions n/a through 2.2.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means an attacke...

PT-2025-10872 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat 2024 affected versions not specified Description: The issue is related to an access of uninitialized...

Security Bulletin: NVIDIA RAPIDS AI - January 2025

NVIDIA has released a software update for NVIDIA® RAPIDS AI cuDF and cuML to address the issues below. To protect your system, download and install this software update from the RAPIDS AI Machine Learning Library. Go to NVIDIA Product Security. Details This section provides a summary of potential...

CVE-2024-45479 Apache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost

SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue...

SUSE-SU-2025:0208-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: - Update to 550.144.03 bsc1235461, bsc1235871 fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869...

RHSA-2025:0401 Red Hat Security Advisory: grafana security update

Bulletin has no description...

RHBA-2025:0305 Red Hat Bug Fix Advisory: .NET 9.0 bug fix and enhancement update

Bulletin has no description...

RHEA-2024:7620 Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Bulletin has no description...

BELL-CVE-2023-52923

Bulletin has no description...

DSA-5847-1 snapcast - security update

Bulletin has no description...

PT-2025-4239

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1 Oracle GraalVM for JDK versions 17.0.13, 21.0.5, 23.0.1 Oracle GraalVM Enterprise Edition versions 20.3.16, 21.3.12 Description A difficult to exploit vulnerability allows...