CVE-2025-58785

CVE-2025-58785 refers to a Missing Authorization (Broken Access Control) vulnerability in the WordPress Ray Enterprise Translation plugin (jbhovik) affecting versions up to 1.7.1. Technical details in connected docs show CVSSv3.1 base score 5.4 (Medium), network attack vector, low attack complexi...

CVE-2025-58785 WordPress Ray Enterprise Translation plugin <= 1.7.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jiro Sasamoto Ray Enterprise Translation lingotek-translation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ray Enterprise Translation: from n/a through = 1.7.2...

WordPress Ray Enterprise Translation plugin <= 1.7.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by LVT-tholv2k in WordPress Plugin Ray Enterprise Translation versions = 1.7.2...

PT-2025-36125

Name of the Vulnerable Software and Affected Versions: jbhovik Ray Enterprise Translation versions through 1.7.1 Description: A missing authorization flaw exists in jbhovik Ray Enterprise Translation, stemming from incorrectly configured access control security levels. Recommendations: Update...

WordPress plugin Ray Enterprise Translation 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush

...

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

...

kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...

Linux Distros Unpatched Vulnerability : CVE-2024-26956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix failure to detect DAT corruption in btree and direct mappings Patch series nilfs2: fix kernel bug at submitbhwbc. This resolves a kernel BUG reporte...

Linux Distros Unpatched Vulnerability : CVE-2025-38511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default ...

WordPress Ray Enterprise Translation plugin <= 1.7.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Ray Enterprise Translation versions = 1.7.1...

Linux Distros Unpatched Vulnerability : CVE-2024-5660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of Hardware Page Aggregation HPA and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1,...

CVE-2025-48312

CVE-2025-48312 affects the WordPress WPAvatar plugin (versions up to 1.9.3). The issue is an Improper Neutralization of Input During Web Page Generation leading to Stored XSS. Vulnerability details from connected docs show the risk is tied to input handling in WPAvatar, with CVSSv3.1 base score 6...

Security update for tomcat10

This update for tomcat10 fixes the following issues: Updated to Tomcat 10.1.44: CVE-2025-48989: Fixed "MadeYouReset" DoS in HTTP/2 due to client triggered stream reset bsc1243895 Other fixes: Catalina Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one or...

PT-2025-35001

Name of the Vulnerable Software and Affected Versions: WPAvatar versions through 1.9.3 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting XSS. Recommendations: Update WPAvatar to a version later tha...

Security update for tomcat11

This update for tomcat11 fixes the following issues: Updated to Tomcat 11.0.10 - CVE-2025-48989: Fixed "MadeYouReset" DoS in HTTP/2 due to client triggered stream reset bsc1243895 Other fixes: Catalina + Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one...

FlowMalTrans: Unsupervised Binary Code Translation for Malware Detection Using Flow-Adapter Architecture

Applying deep learning to malware detection has drawn great attention due to its notable performance. With the increasing prevalence of cyberattacks targeting IoT devices, there is a parallel rise in the development of malware across various Instruction Set Architectures ISAs. It is thus importan...

Linux Distros Unpatched Vulnerability : CVE-2022-33745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Network Address Translation DNS Inspection DoS (cisco-sa-asaftd-nat-dns-dos-bqhynHTM)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability. - A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation NAT DNS inspection for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Network Address Translation DNS Inspection DoS (cisco-sa-asaftd-nat-dns-dos-bqhynHTM)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation NAT DNS inspection for Cisco Secure Firewall Adaptive Security Appliance ASA Software an...