CVE-2025-62225

The vulnerability CVE-2025-62225 affects Sony Optical Disc Archive Software (Windows). The root cause is an unquoted Windows service path, which allows a user with write access to the system drive root to execute arbitrary code with SYSTEM privileges. Affected component is the Windows service reg...

BELL-CVE-2025-62626

Bulletin has no description...

MINI-W62H-CQPR-5PF4

Bulletin has no description...

MINI-JW6M-3QHG-4CXJ

Bulletin has no description...

MINI-HHXJ-H2P6-4FPJ

Bulletin has no description...

MINI-G97W-HPP9-4M58

Bulletin has no description...

MINI-F42V-7QJG-28F6

Bulletin has no description...

MINI-67JP-F7FG-VFJV

Bulletin has no description...

MINI-2QQP-GXQW-GHRR

Bulletin has no description...

MINI-VQ37-W9J8-53F4

Bulletin has no description...

MINI-MCC4-638H-G2XX

Bulletin has no description...

MINI-2C7Q-54C9-JWVQ

Bulletin has no description...

[SECURITY] Fedora 43 Update: rust-tikv-jemallocator-0.6.1-1.fc43

A Rust allocator backed by jemalloc...

[SECURITY] Fedora 43 Update: python-pydantic-core-2.41.4-1.fc43

The pydantic-core project provides the core validation logic for pydantic written in Rust...

[SECURITY] Fedora 43 Update: fastapi-cloud-cli-0.3.1-1.fc43

Deploy and manage FastAPI Cloud apps from the command line...

Sony Optical Disc Archive Software 代码问题漏洞

Sony Optical Disc Archive Software is a system for long-term archiving and data storage from Sony Corporation of Japan. A code issue vulnerability exists in Sony Optical Disc Archive Software that originates from a Windows service registering unquoted file paths, which could cause a user with wri...

PT-2025-45164

Name of the Vulnerable Software and Affected Versions Amazon WorkSpaces client for Linux versions 2023.0 through 2024.8 Description A flaw in the handling of the authentication token within the Amazon WorkSpaces client for Linux may allow exposure of the authentication token for DCV-based...

PT-2025-45110

Name of the Vulnerable Software and Affected Versions Entr'ouvert Lasso versions 2.5.1 and 2.8.2 Description A type confusion issue exists within the lasso node impl init from xml function. A specially crafted SAML response can trigger this issue, potentially leading to arbitrary code execution. ...

KLA90264 DoS vulnerability in Opera

Inappropriate implementation vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 123.0.5669.47 Stable update Related products Opera CVE list CVE-2025-12433 warning Solution Update tot he latest version Download Ope...

CVE-2025-55343

Quipux CVE-2025-55343 affects Quipux 4.0.1 through e1774ac. Multiple authenticated endpoints are exploitable for SQL injection (for example busqueda/busqueda.php, anexos_lista.php, Administracion/listas/.ajax.php, asociar_documentos/ .php, radicacion/.php, reportes/ .php, tx/.php, uploadFiles/ .p...