Fedora: Security Advisory (FEDORA-2025-2215919645)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-14357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the removal of a Hyper-V framebuffer device. When the device is unbound, the hyperv fb driver attempts to release the...

PT-2025-10430 · WordPress · Wp-Recall

Name of the Vulnerable Software and Affected Versions: WP-Recall – Registration, Profile, Commerce & More plugin for WordPress versions up to, and including, 16.26.10 Description: The issue is related to SQL Injection via the databeat parameter due to insufficient escaping on the user-supplied...

PT-2025-28150

Name of the Vulnerable Software and Affected Versions: huggingface/transformers version 4.49.0 Description: A Regular Expression Denial of Service ReDoS vulnerability was discovered in the huggingface/transformers repository. The vulnerability is due to inefficient regular expression complexity i...

ray vulnerable to Insertion of Sensitive Information into Log File

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

GHSA-W4RH-FGX7-Q63M ray vulnerable to Insertion of Sensitive Information into Log File

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

CVE-2025-1979

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

Important: postgresql16

Issue Overview: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the...

PT-2025-9902 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds write in the parsing of bmp images, which can be exploited by local attackers to execute arbitrary code. Recommendations: For versions prior to...

PT-2025-9893 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds read in appending text paragraphs. This allows attackers to read out-of-bounds memory. Recommendations: For versions prior to 4.4.26.71, update to...

PT-2025-9895 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to improper access control, allowing physical attackers to access data across multiple user profiles. Recommendations: For versions prior to 4.4.26.71, update to...

PT-2025-9840 · Redaxo · Redaxo

Name of the Vulnerable Software and Affected Versions: REDAXO versions 5.0.0 through 5.18.2 Description: The issue concerns a Reflected cross-site scripting XSS vulnerability in the rex-api-result parameter on the AddOns page. Recommendations: For versions 5.0.0 through 5.18.2, update to version...

PT-2025-9859 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.499 and earlier Jenkins LTS versions 2.492.1 and earlier Description: The issue allows attackers with Agent/Extended Read permission to view encrypted values of secrets when accessing config.xml of agents via REST API or CL...

PT-2025-9861 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.499 and earlier, LTS 2.492.1 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to have users toggle their collapsed/expanded status of sidepanel widgets, such as Build Queue and Build...

PT-2025-9839 · Redaxo · Redaxo

Name of the Vulnerable Software and Affected Versions: Redaxo versions prior to 5.18.3 Description: The issue concerns arbitrary file upload in the mediapool/media page of the Redaxo CMS. This vulnerability has been fixed in version 5.18.3. Recommendations: For versions prior to 5.18.3, update to...

PT-2025-9749 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 Description: The issue allows unauthenticated editing of driver packages. Recommendations: For versions prior to Virtual Appliance Host...

PT-2025-9744 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.1002 Application 20.0.2614 Description: The issue allows Cross-Site Scripting. Recommendations: For versions prior to Virtual Appliance Host 22.0.1002 Applicatio...

PT-2025-9737 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.35 Description: The issue allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Recommendations: For versions prior...

PT-2025-9667

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 136 Description The issue arises when the String.toUpperCase function causes a string to increase in length, potentially incorporating uninitialized memory into the result string. Recommendations For versions prior to...

PT-2025-9666

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 136 Description A user opt-in setting that requires authentication before use could be bypassed under certain circumstances. Recommendations For versions prior to 136, update to version 136 or later to resolve the iss...