Important: Red Hat Security Advisory: ACS 4.4 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. The updated image includes security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

AZL-56708 CVE-2025-1215 affecting package vim for versions less than 9.1.0791-4

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

DEBIAN-CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

AZL-56770 CVE-2025-1215 affecting package vim for versions less than 9.1.0791-4

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

UBUNTU-CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

PT-2025-6851 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A problematic issue has been found in the searchuser function of the /search resualts.php file. The manipulation of the firstname/lastname argument leads to cross site scripting. It is...

Mitel SIP Phones Argument Injection Vulnerability

Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the...

PT-2025-6850 · Code Projects · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A vulnerability was found in the processing of the file /Profile.php, where the manipulation of the postcontent argument leads to cross-site scripting. The attack may be initiated remotely...

Important: Red Hat Security Advisory: ACS 4.5 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. The updated image includes security fixes. This release of RHACS includes fixes for the following security vulnerabilities: npm-serialize-javascript: Cross-site Scripting XSS in serialize-javascript CVE-2024-11831 go-gi...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.16 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.16 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fixed potential integer overflows. The 64-bit argument for the “get DIMM info” SMC call consists of memctrlidx, which is left-shifted by 16 bits and OR-ed with the DIMM index. Since memctrlidx is defined as a 32-b...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The userfaultfdapi function has been fixed to return EINVAL as expected. Currently, if we request a feature that is not set in the kernel configuration, we will fail silently and return all available features. However, the manual...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dyndbg: fixed an old BUGON in the control parser. Fixed a BUGON from 2009. Even if it seems “unreachable” I haven’t actually checked, let’s ensure it by removing it and instead using prerr and returning -EINVAL...

CVE-2025-1147

A flaw was found in GNU Binutils nm component. This vulnerability allows a buffer overflow via manipulation of the const argument. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of u...

Azure Linux 3.0 Security Update: packer (CVE-2025-21613)

The version of packer installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21613 advisory. - go-git is a highly extensible git implementation library written in pure Go. An argument injection...

PT-2025-6856 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.1.1097 Description: A problematic issue has been found in vim, affecting unknown code in the src/main.c file. The manipulation of the --log argument leads to memory corruption, allowing an attack to be launched on the...

PT-2025-6019 · Unknown +1 · Coinremitter +1

Name of the Vulnerable Software and Affected Versions: CoinRemitter versions 0.0.1 through 0.0.2 Description: A critical issue was found in CoinRemitter on OpenCart, affecting an unknown part. The manipulation of the coin argument leads to SQL injection. It is possible to initiate the attack...

CVE-2017-17529

af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

CVE-2025-24845

Improper neutralization of argument delimiters in a command 'Argument Injection' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause ...