Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005580 fixes several issues. The following security issues were fixed: CVE-2024-49860: ACPI: sysfs: validate return type of STR method bsc1231862. CVE-2025-38177: schhfsc: make hfscqlennotify idempotent bsc1246356. CVE-2025-38181: calipso: Fix...

Living Security Unveils HRMCon 2025 Speakers as Report Finds Firms Detect Just 19% of Human Risk

Austin / TX, United States, 25th September 2025, CyberNewsWire...

CVE-2025-43943

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with...

CVE-2025-57348

The node-cube package prior to version 5.0.0 contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into the prototype of built-in objects. This issue, categorized under CWE-1321, arises from improper validation of...

CVE-2025-57348

The CVE-2025-57348 entry concerns the node-cube package before version 5.0.0, affected up to 5.0.0-beta.19. The root cause is improper validation during prototype chain initialization, enabling prototype pollution by injecting properties into built-in object prototypes. Documented impacts include...

PT-2025-39323

Name of the Vulnerable Software and Affected Versions node-cube versions prior to 5.0.0 Description The node-cube package has an issue in how it initializes the prototype chain, potentially allowing an attacker to add properties to the prototype of built-in objects. This occurs due to insufficien...

CVE-2025-57352

CVE-2025-57352 affects the min-document package prior to 2.19.0 and is a prototype pollution issue via removeAttributeNS, triggered by input involving proto . IBM confirms affected products in connected bulletins: IBM Business Automation Workflow (containers and traditional), IBM Concert Software...

CVE-2025-57348

The node-cube package prior to version 5.0.0 contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into the prototype of built-in objects. This issue, categorized under CWE-1321, arises from improper validation of...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update...

RHSA-2025:16454 Red Hat Security Advisory: Red Hat Product OCP Tools 4.19 OpenShift Jenkins security update

Bulletin has no description...

CVE-2025-9272

creationtimestamp| type| source ---|---|--- 2025-09-19 06:00:32+00:00| seen| https://bsky.app/profile/it-connect.bsky.social/post/3lz66ryrtzz22...

CVE-2025-10670 itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile.php sql injection

A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /checkprofile.php. Executing manipulation of the argument profileid can lead to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-10670

CVE-2025-10670 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is in the processing of /check_profile.php, where manipulating the profile_id parameter can lead to an SQL injection. The issue is exploitable remotely and exploits have been published ...

CVE-2025-10670 itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile.php sql injection

A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /checkprofile.php. Executing manipulation of the argument profileid can lead to sql injection. It is possible to launch the attack remotely. The...

PT-2025-38326

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.19.0-rc6 and earlier Description A use-after-free bug exists in the Linux kernel's drm/meson driver. Specifically, the driver deinitialization sequence was improperly ordered, leading to a use-after-free condition when...

itsourcecode E-Logbook with Health Monitoring System for COVID-19 SQL注入漏洞

itsourcecode E-Logbook with Health Monitoring System for COVID-19 is an electronic logging system for the New Crown Pneumonia Health Monitoring System for COVID-19 open source by itsourcecode. An SQL injection vulnerability exists in itsourcecode E-Logbook with Health Monitoring System for COVID-...

CVE-2025-10614

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /printreportsprev.php. Executing manipulation of the argument profileid can lead to cross site scripting. It is possible to launch the...

CVE-2025-10614

CVE-2025-10614 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is a cross-site scripting flaw in the /print_reports_prev.php file caused by manipulation of the profile_id argument. It is exploitable remotely and has been publicly disclosed. Connect...

itsourcecode E-Logbook with Health Monitoring System for COVID-19 代码注入漏洞

itsourcecode E-Logbook with Health Monitoring System for COVID-19 is an electronic logging system for the New Crown Pneumonia Health Monitoring System for COVID-19 open source by itsourcecode. A code injection vulnerability exists in itsourcecode E-Logbook with Health Monitoring System for COVID-...

PT-2025-38256

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Logbook with Health Monitoring System for COVID-19 version 1.0 Description: A cross-site scripting issue exists due to manipulation of the profile id argument in the /print reports prev.php file. This allows for remote attacks...