CVE-2025-39934 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39934 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-50200 affecting package rabbitmq-server for versions less than 3.13.7-3

CVE-2025-50200 affecting package rabbitmq-server for versions less than 3.13.7-3. A patched version of the package is available...

CVE-2025-39873 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39873 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2024-25260 affecting package elfutils for versions less than 0.189-6

CVE-2024-25260 affecting package elfutils for versions less than 0.189-6. A patched version of the package is available...

CVE-2025-40027 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40027 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-39841 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39841 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-40035 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40035 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-41436 Unauthorized access to archived channel content via threads interface

Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libssh (UTSA-2025-990927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990927 advisory. A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect comparison...

AZL-70085 CVE-2025-40178 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: pid: Add a judgment for ns null in pidnrns taskpidnrns ns = taskactivepidnscurrent; pidnrnsrcudereferencetaskpidptrtask, type, ns; if pid && ns-level level Sometimes null is returned for taskactivepidns. Then it will trigger kern...

CVE-2024-32011

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application use...

AZL-70199 CVE-2025-12748 affecting package libvirt for versions less than 7.10.0-11

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too...

CVE-2025-13021

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-9223

ZOHO ManageEngine Applications Manager, affected through CVE-2025-9223, versions 178100 and below, is vulnerable to an authenticated command injection due to misconfiguration in the Execute Program/execute program action feature. The vulnerability allows total command execution with HIGH impact (...

CVE-2025-11234 affecting package qemu for versions less than 6.2.0-25

CVE-2025-11234 affecting package qemu for versions less than 6.2.0-25. A patched version of the package is available...

CVE-2025-49795 affecting package libxml2 for versions less than 2.10.4-9

CVE-2025-49795 affecting package libxml2 for versions less than 2.10.4-9. A patched version of the package is available...

EUVD-2025-38072

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...

EUVD-2025-38131

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through 1.6.4...

CVE-2025-62055 WordPress Academist theme < 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...

CVE-2025-62036

CVE-2025-62036 is a Cross-Site Scripting (XSS) vulnerability affecting the WordPress theme Togo (uxper) versions prior to 1.0.4. The issue arises from improper input neutralization during web page generation. Affected product: Togo theme (