[SECURITY] Fedora 43 Update: rclone-1.72.1-1.fc43

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

[SECURITY] Fedora 43 Update: cpp-httplib-0.30.1-5.fc43

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include the httplib.h file in your code!...

[SECURITY] Fedora 43 Update: mingw-python3-3.11.14-5.fc43

MinGW Windows python3...

[SECURITY] Fedora 43 Update: mingw-libtasn1-4.21.0-1.fc43

libtasn1 is the ASN.1 library used in GNUTLS. This package contains the MinGW Windows cross compiled libtasn1 library...

[SECURITY] Fedora 43 Update: mariadb11.8-11.8.5-1.fc43

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

PT-2026-3996

Name of the Vulnerable Software and Affected Versions SmartDataSoft Pool Services versions through 3.3 Description A Server-Side Request Forgery SSRF issue exists in SmartDataSoft Pool Services. This allows for Server Side Request Forgery. The issue is present in pool-services. Recommendations...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57949)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57949 advisory. - In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Don't enable...

TMS Management Console security vulnerabilities

TMS Management Console is a management console software developed by the American company TMS. Version 6.3.7.27386.20250818 of TMS Management Console contains a security vulnerability. This vulnerability stems from the Logo upload function in the /Customer/AddEdit section, which has a file upload...

WordPress plugin Stock Manager for WooCommerce has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

PT-2026-4083

Name of the Vulnerable Software and Affected Versions matiskiba Ravpage versions prior to 2.33 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to...

PT-2026-4213

Cross-Site Request Forgery CSRF vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Cross Site Request Forgery.This issue affects PawFriends - Pet Shop and Veterinary WordPress Theme: from n/a through = 1.3...

PT-2026-4264

Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through = 2.4.3...

WordPress plugin lbg-vp2-html5-rightside has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2025-67221

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...

sm-crypto data forgery vulnerability

sm-crypto is an encryption algorithm developed by June01 as a personal developer. Versions of sm-crypto prior to 0.3.14 contained a data falsification vulnerability. This vulnerability stemmed from a malleability flaw in the SM2 signature verification logic, which could allow the generation of ne...

Fedora 43 : mingw-libtasn1 (2026-0dfbd2a5e2)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0dfbd2a5e2 advisory. Update to 4.21.0, fixes CVE-2025-13151. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : mingw-libxslt (2026-84be018d47)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84be018d47 advisory. Backport fix for CVE-2025-11731 and proposed fix for CVE-2025-10911 Tenable has extracted the preceding description block directly from the Fedora...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38148)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38148 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when usi...

Azure Linux 3.0 Security Update: samba (CVE-2022-3437)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3437 advisory. - A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3...

Fedora 43 : curl (2026-e27b23af78)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e27b23af78 advisory. - fix broken TLS options for threaded LDAPS CVE-2025-14017 Tenable has extracted the preceding description block directly from the Fedora security advisory...