Debian dla-4373 : libwebsockets-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4373 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4373-1 [email protected]...

M-Files Server 安全漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server versions prior to 25.11.15392.1, prior to 25.2 LTS SR2, and prior to 25.8 LTS SR2, which stems from a denial of service vulnerability in the MFserver process...

Debian dla-4371 : gir1.2-gst-plugins-base-1.0 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4371 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4371-1 [email protected]...

Debian dla-4370 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4370 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4370-1 [email protected]...

CVE-2025-25216

Improper input validation in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2025-25216

CVE-2025-25216 involves improper input validation in Intel graphics firmware and Intel LTS kernels within Ring 1: Device Drivers, enabling a local, low-complexity DoS by an authenticated, unprivileged user. Red Hat and ENISA entries confirm the same issue affecting Intel Arc graphics family and r...

PT-2025-48394

Name of the Vulnerable Software and Affected Versions Scada-LTS versions prior to 2.7.8.1 Description A path traversal issue exists in Scada-LTS. The Common.getHomeDir function within the br/org/scadabr/vo/exporter/ZIPProjectManager.java file of the Project Import component is affected. This...

Ubuntu 24.04 LTS / 25.04 / 25.10 : OpenStack Keystone vulnerability (USN-7857-1)

The remote Ubuntu 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7857-1 advisory. Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to...

Debian dla-4365 : libunbound-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4365 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4365-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4360 : pure-ftpd - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4360 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4360-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4358 : wordpress - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4358 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4358-1 [email protected]...

CVE-2025-62795

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts and v4.10.12-lts, a low-privileged authenticated user can invoke LDAP configuration tests and start LDAP synchronization by sending crafted messages to the /ws/ldap/ WebSocket...

[SECURITY] [DLA 4354-1] pypy3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4354-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura October 31, 2025 https://wiki.debian.org/LTS -...

Debian dla-4354 : pypy3 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4354 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4354-1 [email protected]...

CVE-2025-62795 JumpServer Unauthorized LDAP Configuration Access via WebSocket

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts and v4.10.12-lts, a low-privileged authenticated user can invoke LDAP configuration tests and start LDAP synchronization by sending crafted messages to the /ws/ldap/ WebSocket...

CVE-2025-62795 JumpServer Unauthorized LDAP Configuration Access via WebSocket

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts and v4.10.12-lts, a low-privileged authenticated user can invoke LDAP configuration tests and start LDAP synchronization by sending crafted messages to the /ws/ldap/ WebSocket...

CVE-2025-62712

CVE-2025-62712 affects JumpServer. In versions before 3.10.20-lts and 4.10.11-lts, an authenticated, non-privileged user can retrieve other users’ connection tokens via the /api/v1/authentication/super-connection-token/ endpoint. When accessed through a browser, the endpoint returns tokens from a...

CVE-2025-62712 JumpServer Connection Token Leak Vulnerability

JumpServer is an open source bastion host and an operation and maintenance security audit system. In JumpServer versions prior to v3.10.20-lts and v4.10.11-lts, an authenticated, non-privileged user can retrieve connection tokens belonging to other users via the super-connection API endpoint...

[SECURITY] [DLA 4353-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4353-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2025 https://wiki.debian.org/LTS -...

Debian dla-4352 : python-authlib-doc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4352 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4352-1 [email protected]...