Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in the Android operating system. Samsung has fixed vulnerabilities relevant to Samsung Mobile in Samsung Mobile. The vulnerabilities are in how the GPU Kernel Drivers handle system calls from non-privileged users. This can lead to unauthorized access to memory,...

May 13, 2025—KB5058403 (Monthly Rollup)

None None...

May 13, 2025—Hotpatch KB5058497 (OS Build 26100.3981)

None None...

June 10, 2025—KB5060533 (OS Builds 19044.5965 and 19045.5965) - EXPIRED

None None...

June 10, 2025—Hotpatch KB5060841 (OS Build 26100.4270)

None None...

May 13, 2025—KB5058451 (Monthly Rollup)

None None...

PT-2025-24615

Name of the Vulnerable Software and Affected Versions Avaya Call Management System versions 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0. Description An improper input validation in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web...

WordPress plugin RH - Real Estate WordPress Theme Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-24825

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description The issue is related to a use after free condition in Windows Remote Desktop Services, which enables an unauthorized attacker to execute code over a network...

Security Updates for Microsoft SharePoint Server 2019 (June 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-47163, CVE-2025-47166, CVE-2025-47168, CVE-2025-47169, CVE-2025-47172 %NASLMINLEVEL 70300 C...

Security Updates for Microsoft PowerPoint Products (June 2025)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instea...

PT-2025-24685 · Nautobot +1 · Nautobot +1

Name of the Vulnerable Software and Affected Versions: Nautobot versions prior to 1.6.32 Nautobot versions prior to 2.4.10 Description: The issue arises from insufficient security configuration of the Jinja2 templating feature in Nautobot, which can be exploited by a malicious user to expose...

PT-2025-31298

Name of the Vulnerable Software and Affected Versions Safari affected versions not specified Description The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash. Recommendations Update to watchOS 11.6. Update to iOS...

PT-2025-25016 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could...

kernel security update

5.14.0-570.21.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Security Updates for Microsoft Word Products (June 2025)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

Siemens SCALANCE and RUGGEDCOM

SUMMARY Several Industrial Communication Devices based on SINEC OS before V3.2 contain multiple vulnerabilities that could allow an attacker to circumvent authorization checks and perform actions that exceed the permissions of the "guest" role. Siemens has released new versions for the affected...

Security Updates for Microsoft SharePoint Server 2016 (June 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-47163, CVE-2025-47166, CVE-2025-47168, CVE-2025-47169, CVE-2025-47172 %NASLMINLEVEL 70300 C...

thunderbird security update

128.11.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.11.0 - Add OpenELA debranding 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cowfilerange failed CVE-2024-57976 In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dupmmap failures and uprobe registering...