PT-2025-30272 · Sophos · Sophos Firewall

Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 21.0 MR2 21.0.2 Description: A command injection vulnerability exists in the WebAdmin component of Sophos Firewall. This issue can allow adjacent attackers to achieve pre-authentication code execution on High...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to compromise the availability of the device.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to compromise the availability of the device...

OPENSUSE-SU-2025:15369-1 cyradm-3.8.6-1.1 on GA media

These are all security issues fixed in the cyradm-3.8.6-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20250721-02

A vulnerability in the assert function of the GNU C Library system library is related to incorrect calculations of the the size of the allocated buffer. Exploitation of the vulnerability could allow an attacker acting remotely, affect the availability of protected information...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to compromise the availability of the device.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the lack of memory release after the effective lifespan of the protocol. Exploiting this vulnerability can allow an attacker to compromise the availability...

OPENSUSE-SU-2025:15366-1 python312-3.12.11-3.1 on GA media

These are all security issues fixed in the python312-3.12.11-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15364-1 libexslt0-1.1.43-2.1 on GA media

These are all security issues fixed in the libexslt0-1.1.43-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15363-1 libxml2-2-2.13.8-3.1 on GA media

These are all security issues fixed in the libxml2-2-2.13.8-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15365-1 python311-3.11.13-3.1 on GA media

These are all security issues fixed in the python311-3.11.13-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15361-1 busybox-1.37.0-5.1 on GA media

These are all security issues fixed in the busybox-1.37.0-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15368-1 lemon-3.50.3-1.1 on GA media

These are all security issues fixed in the lemon-3.50.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15367-1 python313-3.13.5-3.1 on GA media

These are all security issues fixed in the python313-3.13.5-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15355-1 cosign-2.5.3-1.1 on GA media

These are all security issues fixed in the cosign-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15354-1 bind-9.20.11-1.1 on GA media

These are all security issues fixed in the bind-9.20.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15356-1 java-11-openjdk-11.0.28.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.28.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15359-1 valkey-8.1.3-1.1 on GA media

These are all security issues fixed in the valkey-8.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-30751

Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.27 and 23.4-23.8. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromis...

CVE-2025-7338

A denial of service vulnerability was found in the Multer NPM library. This vulnerability allows an attacker to trigger a denial of service DoS by sending a malformed multi-part upload request. This request causes an unhandled exception, resulting in a process crash. Mitigation Mitigation for thi...

Fail-Open Architecture for Secure Inline Protection on Azure

Every inline deployment introduces a tradeoff: enhanced inspection versus increased risk of downtime. Inline protection is important, especially for APIs, which are now the most targeted attack surface, but so is consistent uptime and performance. This is where a fail-open architecture comes in...

PT-2025-29918 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager. A SQL Injection vulnerability exists in versions prior to 3.4.6. This vulnerability allows attackers to execute arbitrary SQL commands via the...