[SECURITY] Fedora 43 Update: cef-141.0.11^chromium141.0.7390.122-1.fc43

CEF is an embeddable build of Chromium, powered by WebKit Blink...

CVE-2025-42893

The CVE-2025-42893 issue is an Open Redirect in SAP Business Connector. An unauthenticated attacker can craft a URL that, when visited by a victim, redirects to an attacker-controlled site displayed in an embedded frame. This can lead to disclosure of sensitive information and unauthorized action...

CVE-2025-42893 Open Redirect vulnerability in SAP Business Connector

Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site displayed within an embedded frame. Successful exploitation could allow the attacker to steal...

WordPress Plugin Atarim Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Atarim, which can be...

CVE-2025-42893: URL Redirection to Untrusted Site

Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site displayed within an embedded frame. Successful exploitation could allow the attacker to steal...

TZ Secure OS system Data Compromise

The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm devices is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

Qualcomm DSP service Data Compromise

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

Qualcomm Embedded Software Array Indexing

The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm Execution Buffer Overflow

The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Embedded Software Data Compromise

The vulnerability of embedded Qualcomm software systems relates to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Execution Outside Buffer Disclosure

The vulnerability of embedded software developed by Qualcomm relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

Qualcomm Integer Overflow

The vulnerability of embedded Qualcomm software programs is related to integer overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

WinBlas driver Data Compromise

The vulnerability of the WinBlast driver of Qualcomm’s embedded software lies in the issue of buffer overflow attacks. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

SMSS Component Disclosure

The vulnerability of the SMSS component in embedded Qualcomm software systems is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to disclose protected information...

Windows Compute system components Data Compromise

The vulnerability of the Windows Compute microprogramming system components in Qualcomm’s embedded chips relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2025-60188

Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through = 4.2.1...

CVE-2025-62039

Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through = 2.6.6...

CVE-2025-62038

Insertion of Sensitive Information Into Sent Data vulnerability in Sovlix MeetingHub meetinghub allows Retrieve Embedded Sensitive Data.This issue affects MeetingHub: from n/a through = 1.23.9...

[SECURITY] Fedora 41 Update: mbedtls-2.28.10-2.fc41

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

Lexmark Printers Stored Cross-site Scripting (CVE-2020-13481)

A stored cross site scripting vulnerability has been identified in the embedded web server used in Lexmark devices. The vulnerability can be used to attack the user’s browser, exposing session credentials and other information accessible to the browser. %NASLMINLEVEL 80900 C Tenable, Inc...