PT-2026-60774

Name of the Vulnerable Software and Affected Versions Proxmox Virtual Environment qemu-server versions 9.x prior to 9.1.8 Proxmox Virtual Environment qemu-server versions 8.x prior to 8.4.8 Description Incorrect access control allows users with limited privileges to obtain hashed passwords throug...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : HPLIP vulnerabilities (USN-8483-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8483-1 advisory. It was discovered that HPLIP incorrectly handled certain print data. An attacker could possibly use this issue to cause...

mysql:8.4 security update

mecab 0.996-3.4 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: 2182069 0.996-3.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 0.996-3.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related:...

mysql8.4 security update

8.4.8-1 - Rebase to 8.4.8 8.4.7-2 - Skip tests that are failing on Konflux - Resolves: ROK-831...

CVE-2025-10488

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validation in the addlistingaction AJAX action in all versions up to, and including, 8.4.8. This makes it possible for...

CVE-2025-10488

CVE-2025-10488 — Directorist (WordPress)

CVE-2025-10488 Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validation in the addlistingaction AJAX action in all versions up to, and including, 8.4.8. This makes it possible for...