CLSA-2025-1749481543 mysql: Fix of 20 CVEs

Update to MySQL 8.0.42 - CVEs fixed: CVE-2025-21574 CVE-2025-21577 CVE-2025-21579 CVE-2025-21581 CVE-2025-21584 CVE-2025-21585 CVE-2025-30681 CVE-2025-30682 CVE-2025-30683 CVE-2025-30684 CVE-2025-30688 CVE-2025-30689 CVE-2025-30695 CVE-2025-30696 CVE-2025-30699 CVE-2025-30703 CVE-2025-30705...

CVE-2025-5875

creationtimestamp| type| source ---|---|--- 2025-06-08 18:07:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114649073412244468 2025-06-09 12:01:36+00:00| seen| Telegram/bTJ9s6Dm5c98HBwnHhlVxkUI4b7kIVaieHQvre00jyC9A 2025-06-12 19:33:50+00:00| published-proof-of-concept|...

CVE-2025-49619

creationtimestamp| type| source ---|---|--- 2025-06-07 14:30:39+00:00| published-proof-of-concept| Telegram/YSJhdJjMlrABiHF1mC9tmQTTaLYxNBOL8QpiCjaALoLvyOE 2025-06-07 16:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzszxvl7m2c 2025-06-15 08:14:08+00:00|...

CVE-2025-47601

creationtimestamp| type| source ---|---|--- 2025-06-07 05:00:22+00:00| seen| Telegram/rvYzq3XuSqIS6Jq2gKTARck8Jdf3ZePMyR6aO0nPIgKoa34 2025-06-07 06:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqyqy4kql72e...

CVE-2025-5789

creationtimestamp| type| source ---|---|--- 2025-06-06 19:33:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxlaobxcp25...

CVE-2025-30956 WordPress Booqable Rental plugin <= 2.4.25 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Booqable Rental Software Booqable Rental booqable-rental-reservations allows Cross Site Request Forgery.This issue affects Booqable Rental: from n/a through = 2.4.25...

CVE-2025-5721

creationtimestamp| type| source ---|---|--- 2025-06-06 05:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw4o2hin62q...

IBM Verify Identity Access Digital Credentials 安全漏洞

IBM Verify Identity Access Digital Credentials is a rights management system from International Business Machines IBM. A security vulnerability exists in IBM Verify Identity Access Digital Credentials version 24.06, which stems from an error message disclosure that could lead to access to sensiti...

openSUSE Security Advisory (SUSE-SU-2025:01813-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress plugin WP Tools 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

USN-7558-1 gst-plugins-bad1.0 vulnerabilities

It was discovered that the AV1 codec plugin in GStreamer could be made to write out of bounds. An attacker could possibly use this issue to cause applications using the plugin to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS...

CVE-2020-28895

creationtimestamp| type| source ---|---|--- 2025-06-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-02 2025-09-09 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-252-09 2025-09-09 20:03:37+00:00| seen|...

CVE-2025-20286

creationtimestamp| type| source ---|---|--- 2025-06-04 16:44:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114626101159277212 2025-06-04 19:08:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsiwkcmhy2r 2025-06-05 03:37:00+00:00| seen|...

CVE-2025-5438

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. Affected by this vulnerability is the function WPS of the file /goform/WPS. The manipulation of the argument PIN leads ...

CVE-2025-20996

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3sdntiqu2 2025-06-04 07:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrbf6c4yc2r...

PT-2025-74: Local Privilege Escalation (LPE) in Mozilla VPN

The vulnerability was identified in Mozilla VPN, versions 2.27.0 on MacOS. The discovered vulnerability allows an attacker to escalate privileges from a normal user to root. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 04.06.2025 Recommendations: Update to version...

nodejs:20 security update

nodejs 1:20.19.2-1 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 nodejs-nodemon nodejs-packaging...

SUSE: Security Advisory (SUSE-SU-2025:0554-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5525

creationtimestamp| type| source ---|---|--- 2025-06-03 20:27:18+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqq4na7icl42 2025-06-03 20:28:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114621319697762645 2025-06-03...

CVE-2025-5404

A vulnerability classified as problematic was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This vulnerability affects unknown code of the file /search.php of the component GET Parameter Handler. The manipulation of the argument Search leads to denial of service...