CVE-2025-31746

Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through = 1.1.4...

CVE-2025-31558

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Greg TailPress tailpress allows Retrieve Embedded Sensitive Data.This issue affects TailPress: from n/a through = 0.4.4...

CVE-2025-31541

Missing Authorization vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TuriTop Booking System: from n/a through = 1.0.10...

BIT-JOOMLA-2021-26039 [20210705] - Core - XSS in com_media imagelist

An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of commedia leads to a XSS vulnerability...

BIT-JOOMLA-2021-23130 [20210304] - Core - XSS within the feed parser library

An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of feed fields could lead to xss issues...

USN-7413-1: Linux kernel (IoT) vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

CVE-2024-53868

A flaw was found in Apache Traffic Server. This vulnerability allows request smuggling via chunked messages, potentially leading to security bypass. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as...

CVE-2025-22005

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw. fibchecknhv6gw expects that fib6nhinit cleans up everything when it fails. Commit 7dd73168e273 "ipv6: Always allocate pcpu memory in a fib6nh" moved fibnhcommoninit before...

CVE-2025-30218

A flaw was found in the Next.js package. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id, which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js application...

GHSA-JF85-CPCP-J695

creationtimestamp| type| source ---|---|--- 2025-04-03 02:06:20+00:00| seen| https://gist.github.com/shmil111/0a44cfb066f7a8de2e03f671c12f585f 2025-04-03 05:09:00+00:00| seen| https://gist.github.com/shmil111/fb79705b111af53d22c7d3bdcbd34051...

GHSA-X5RQ-J2XG-H7QM

creationtimestamp| type| source ---|---|--- 2025-04-03 02:06:20+00:00| seen| https://gist.github.com/shmil111/0a44cfb066f7a8de2e03f671c12f585f 2025-04-03 05:09:00+00:00| seen| https://gist.github.com/shmil111/fb79705b111af53d22c7d3bdcbd34051...

Moodle Permission Issues Vulnerability

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. A vulnerability exists in Moodle for privilege issues. The vulnerability stems from insufficient permission checking that allo...

OPENSUSE-SU-2025:14961-1 firefox-esr-128.9.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14962-1 go1.23-1.23.8-1.1 on GA media

These are all security issues fixed in the go1.23-1.23.8-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-14732 · Unknown · Think201 Clients

Name of the Vulnerable Software and Affected Versions: Think201 Clients versions 1.1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Think201 Clients...

PT-2025-22639 · Opensuse · Gsl

These are all security issues fixed in the gsl-2.8-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14964-1 gsl-2.8-4.1 on GA media

These are all security issues fixed in the gsl-2.8-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14965-1 python311-ecdsa-0.19.1-1.1 on GA media

These are all security issues fixed in the python311-ecdsa-0.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 40 : suricata (2025-2a295896e6)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2a295896e6 advisory. This is an extra release to address a critical issue in 7.0.9 affecting AFPACKET users: setting a BPF would cause Suricata to fail to start up. This...