ABB Drive Composer

SUMMARY An update is available that resolves vulnerability in the product versions as affected in this advisory. An attacker who successfully exploits the vulnerability could get unauthorized access to the file system on the host machine. This can lead to the execution of arbitrary code, data...

DLA-4010-1 python-django - security update

Bulletin has no description...

PT-2025-4351

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.73/6.12.10 Description The issue is related to a null pointer dereference in the Linux kernel's vsock/bpf module. This can occur when a socket has a null transport, for example, after a failed connect call. T...

PT-2025-2414 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: Microweber version 2.0.9 Microweber versions prior to 2.0.9 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint...

OPENSUSE-SU-2025:14629-1 chromedriver-131.0.6778.264-1.1 on GA media

These are all security issues fixed in the chromedriver-131.0.6778.264-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Firefox SEoL (105.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

CVE-2025-21628 Chatwoot has a Blind SQL-injection in Conversation and Contacts filters

Chatwoot is a customer engagement suite. Prior to 3.16.0, conversation and contact filters endpoints did not sanitize the input of queryoperator passed from the frontend or the API. This provided any actor who is authenticated, an attack vector to run arbitrary SQL within the filter query by addi...

SUSE-SU-2025:0043-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 bsc1234851: Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously crafted web content may lead to an unexpected...

RHSA-2025:0067 Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, and kpatch-patch-4_18_0-372_91_1 security update

Bulletin has no description...

RHSA-2025:0066 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2025:0064 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2025:0060 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2025:0058 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2025:0055 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2025:0050 Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, and kpatch-patch-5_14_0-70_85_1 security update

Bulletin has no description...

RHSA-2025:0049 Red Hat Security Advisory: kpatch-patch-5_14_0-503_15_1 security update

Bulletin has no description...

DSA-5840-1 chromium - security update

Bulletin has no description...

PT-2025-1086 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.7 through 17.5.5 GitLab CE/EE versions 17.6 through 17.6.3 GitLab CE/EE versions 17.7 through 17.7.1 Description: An issue was discovered in GitLab CE/EE that allows a denial of service DoS by creating cyclic referenc...

WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover

Impact Users of WireGuard Portal v2 who have OAuth or OIDC authentication backends enabled can be affected by an Account Takeover vulnerability if they visit a malicious website. Patches The problem was fixed in the latest alpha release, v2.0.0-alpha.3. The docker images for the tag 'latest' buil...

GHSA-2R2V-9PF8-6342 WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover

Impact Users of WireGuard Portal v2 who have OAuth or OIDC authentication backends enabled can be affected by an Account Takeover vulnerability if they visit a malicious website. Patches The problem was fixed in the latest alpha release, v2.0.0-alpha.3. The docker images for the tag 'latest' buil...