BIT-JENKINS-2025-67639

A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...

BIT-JENKINS-2025-67635

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

CVE-2025-67639

A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...

CVE-2025-67639

A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...

[SECURITY] [DLA 4400-1] rear security update

Debian LTS Advisory DLA-4400-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert December 10, 2025 https://wiki.debian.org/LTS Package : rear Version : 2.6+dfsg-1+deb11u1 CVE ID : CVE-2024-23301 Debian Bug : 1060747 It has been discovered that Relax-and-Recover aka...

PT-2025-50357

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.540 and earlier Jenkins LTS versions 2.528.2 and earlier Description A cross-site request forgery CSRF issue exists in Jenkins that could allow an attacker to trick users into logging in to the attacker’s account. A CSRF...

PT-2025-50353

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.540 and earlier Jenkins LTS versions 2.528.2 and earlier Description Jenkins does not properly close HTTP-based CLI connections when the connection stream becomes corrupted. This can allow unauthenticated attackers to cause ...

Debian dla-4400 : rear - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4400 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4400-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4399 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4399 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4399-1 [email protected]...

Debian dla-4398 : gir1.2-soup-2.4 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4398 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4398-1 [email protected]...

Debian dla-4335 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4335 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4335-1 [email protected]...

Debian dla-4396 : libpng-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4396 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4396-1 [email protected]...

[SECURITY] [DLA 4395-1] krita security update

Debian LTS Advisory DLA-4395-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert December 05, 2025 https://wiki.debian.org/LTS Package : krita Version : 1:4.4.2+dfsg-1+deb11u1 CVE ID : CVE-2025-59820 Loading a manipulated TGA file in krita, an image manipulation...

[SECURITY] [DLA 4394-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4394-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 04, 2025 https://wiki.debian.org/LTS -...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Ghostscript vulnerabilities (USN-7904-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7904-1 advisory. Piotr Kajda discovered that Ghostscript incorrectly handled writing certain files. An attacker could possibly use this issue to...

Debian dla-4394 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4394 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4394-1 [email protected]...

Debian dla-4386 : sogo - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4386 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4386-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4390 : pagure - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4390 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4390-1 [email protected]...

CVE-2025-13791

A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is...

CVE-2025-13790

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure...