PT-2025-33672 · Aiven · Aiven-Db-Migrate

Name of the Vulnerable Software and Affected Versions: aiven-db-migrate versions prior to 1.0.7 Description: aiven-db-migrate is a database migration tool. A privilege escalation issue exists that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrust...

Linux Distros Unpatched Vulnerability : CVE-2022-45136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the underlying...

Linux Distros Unpatched Vulnerability : CVE-2024-27309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced. Two preconditions are need...

Security update for systemd

This update for systemd fixes the following issues: Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...

SUSE-SU-2025:20597-1 Security update for systemd

This update for systemd fixes the following issues: - Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...

Malicious code in zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq (npm)

The package zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq was found to contain malicious code...

Malicious code in migration-progress-announce (npm)

The package migration-progress-announce was found to contain malicious code...

MAL-2025-26314 Malicious code in migration-progress-announce (npm)

The package migration-progress-announce was found to contain malicious code...

Malicious code in strict-null-check-migration-tools (npm)

The package strict-null-check-migration-tools was found to contain malicious code...

Malicious code in sql-logs-migration-service (npm)

The package sql-logs-migration-service was found to contain malicious code...

MAL-2025-33835 Malicious code in sql-logs-migration-service (npm)

The package sql-logs-migration-service was found to contain malicious code...

MAL-2025-41000 Malicious code in zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq (npm)

The package zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq was found to contain malicious code...

MAL-2025-19563 Malicious code in ember-module-migration (npm)

The package ember-module-migration was found to contain malicious code...

Malicious code in ember-module-migration (npm)

The package ember-module-migration was found to contain malicious code...

Security update for systemd

This update for systemd fixes the following issues: Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...

SUSE-SU-2025:20554-1 Security update for systemd

This update for systemd fixes the following issues: - Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...

CVE-2025-8482 Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of data in version 2.8.4. This is due to a missing capability check on the migratefromwpuseravatar function. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2025-8482 Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of data in version 2.8.4. This is due to a missing capability check on the migratefromwpuseravatar function. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2025-8482

The CVE concerns the WordPress plugin Simple Local Avatars, affected in version 2.8.4. Root cause: missing capability check in migrate_from_wp_user_avatar(), enabling authenticated users with subscriber-level access and above to modify avatar metadata for all users. Impact: unauthorized data modi...

PT-2025-32632 · WordPress · Simple Local Avatars

Name of the Vulnerable Software and Affected Versions: Simple Local Avatars plugin for WordPress version 2.8.4 Description: The Simple Local Avatars plugin for WordPress is susceptible to unauthorized data modification due to an incomplete capability check within the migrate from wp user avatar...