Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-2621)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2025-2619)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-54472

Name of the Vulnerable Software and Affected Versions KDE messagelib versions prior to 25.11.90 Description The software does not properly handle SSL errors when using the Google Safe Browsing Lookup API, potentially allowing for spoofing of threat data. This issue affects the find function withi...

Debian: Security Advisory (DLA-4426-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2025-2631)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2025-2611)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2025-364-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-53843

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions prior to 3.2.1 Description A cross site scripting issue exists in SohuTV CacheCloud. The issue is located in the init function within the file src/main/java/com/sohu/cache/web/controller/LoginController.java. This...

PT-2025-53874

Name of the Vulnerable Software and Affected Versions thembay Puca versions through 2.6.39 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...

PT-2025-53880

Name of the Vulnerable Software and Affected Versions BWL Pro Voting Manager versions through 1.4.9 Description The BWL Pro Voting Manager software contains a flaw related to improper input handling during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This issue could...

PT-2025-53893

Name of the Vulnerable Software and Affected Versions Stephen Harris Event Organiser event-organiser versions through 3.12.8 Description An issue exists in Stephen Harris Event Organiser event-organiser related to incorrectly configured access control security levels, potentially allowing...

PT-2025-54175

Name of the Vulnerable Software and Affected Versions zhujunliang3 work platform versions prior to 6bc5a50bb527ce27f7906d11ea6ec139beb79c31 Description A cross site scripting issue exists in the Content Handler component of the software. The issue can be triggered remotely through manipulation. T...

PT-2025-53882

Name of the Vulnerable Software and Affected Versions XforWooCommerce Share, Print and PDF Products for WooCommerce versions through 3.1.2 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for potential...

PT-2025-53904

Name of the Vulnerable Software and Affected Versions Marketing Fire Discussion Board wp-discussion-board versions through 2.5.7 Description An authorization issue exists in Marketing Fire Discussion Board wp-discussion-board, allowing exploitation due to incorrectly configured access control...

PT-2025-53885

Name of the Vulnerable Software and Affected Versions WebCodingPlace Responsive Posts Carousel Pro versions through 15.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for...

PT-2025-53886

Name of the Vulnerable Software and Affected Versions wpDiscuz versions through 7.6.40 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendations Update wpDiscuz to a version late...

PT-2025-53920

Name of the Vulnerable Software and Affected Versions wpdesk ShopMagic versions through 4.7.2 Description An authorization issue exists in wpdesk ShopMagic shopmagic-for-woocommerce, allowing exploitation of incorrectly configured access control security levels. Recommendations Update wpdesk...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-2.14.0-py3-none-any.whl which is vulnerable to CVE-2024-55459.

Summary IBM Maximo Application Suite - Monitor Component uses keras-2.14.0-py3-none-any.whl which is vulnerable to CVE-2024-55459. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2024-55459 DESCRIPTION: An issue in keras 3.7.0 allows attackers to...

PT-2025-53794

Name of the Vulnerable Software and Affected Versions Crocoblock JetPopup versions through 2.0.20.1 Description An authorization bypass exists in Crocoblock JetPopup due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendatio...

PT-2025-53777

Name of the Vulnerable Software and Affected Versions PixelYourSite versions up to and including 11.1.5 Description The PixelYourSite plugin for WordPress is susceptible to sensitive information disclosure through publicly exposed log files. An unauthenticated attacker may be able to view...