CVE-2025-48940 MyBB's upgrade component vulnerable to local file inclusion

MyBB is free and open source forum software. Prior to version 1.8.39, the upgrade component does not validate user input properly, which allows attackers to perform local file inclusion LFI via a specially crafted parameter value. In order to exploit the vulnerability, the installer must be...

[SECURITY] [DLA 4195-1] krb5 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4195-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès May 30, 2025 https://wiki.debian.org/LTS -...

CVE-2024-47943

The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the...

CVE-2024-27297

Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host or another fixed-output derivation via Unix domain sockets in the abstract namespace. This allows to modify the...

CVE-2022-48072

Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...

CVE-2021-32659

Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier, if a bridge has room upgrade handling turned on in the configuration the roomUpgradeOpts key when instantiating a new Bridge instance., any m.room.tombstone...

CVE-2010-2896

IBM FileNet Content Manager CM 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors...

CVE-2015-9251 affecting package python-blinker for versions less than 1.7.0-4

CVE-2015-9251 affecting package python-blinker for versions less than 1.7.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2024-25112 affecting package exiv2 for versions less than 0.28.3-1

CVE-2024-25112 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24826 affecting package exiv2 for versions less than 0.28.3-1

CVE-2024-24826 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2016-9842 affecting package fltk for versions less than 1.3.8-1

CVE-2016-9842 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-25690 affecting package mod_http2 for versions less than 2.0.29-3

CVE-2023-25690 affecting package modhttp2 for versions less than 2.0.29-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-36039 affecting package python-PyMySQL for versions less than 1.1.1-3

CVE-2024-36039 affecting package python-PyMySQL for versions less than 1.1.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-21947 affecting package kernel for versions less than 6.6.85.1-2

CVE-2025-21947 affecting package kernel for versions less than 6.6.85.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-21980 affecting package kernel for versions less than 6.6.85.1-2

CVE-2025-21980 affecting package kernel for versions less than 6.6.85.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-21760 affecting package kernel for versions less than 5.15.180.1-1

CVE-2025-21760 affecting package kernel for versions less than 5.15.180.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-6918 affecting package libssh for versions less than 0.10.6-1

CVE-2023-6918 affecting package libssh for versions less than 0.10.6-1. An upgraded version of the package is available that resolves this issue...

RHEL 8 / 9 : OpenShift Container Platform 4.12.74 (RHSA-2025:2443)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2443 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

CVE-2025-21681 affecting package kernel for versions less than 6.6.76.1-1

CVE-2025-21681 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-57938 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-57938 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...