CVE-2025-9228

MiR software (versions prior to 3.0.0) has insufficient authorization controls when creating text notes, allowing low-privilege users to create notes intended for administrators. Root cause: authorization gap in text-note creation. Impact: potential integrity concerns within text notes; CVSS-A/I ...

SUSE-SU-2025:02924-1 Security update for go1.25

go1.25 released 2025-08-12 is a major release of Go. go1.25.x minor releases will be provided through August 2026. https://github.com/golang/go/wiki/Go-Release-Cycle go1.25 arrives six months after Go 1.24. Most of its changes are in the implementation of the toolchain, runtime, and libraries. As...

Linux Distros Unpatched Vulnerability : CVE-2021-21409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers &...

PT-2025-34027 · Mir · Mir

Name of the Vulnerable Software and Affected Versions: MiR software versions prior to 3.0.0 Description: MiR software versions prior to 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes intended only for administrative users...

Mobile Industrial Robots MiR Robots 安全漏洞

Mobile Industrial Robots MiR Robots is an autonomous mobile robot from Mobile Industrial Robots, Denmark. A security vulnerability exists in Mobile Industrial Robots MiR Robots versions prior to 3.0.0, which stems from insufficient authorization controls and could allow a low-privileged user to...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.20.2.SP1 security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Important: kernel-livepatch-4.14.355-280.652

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: check if the new fence is really later CVE-2022-49935 Affected Packages: kernel-livepatch-4.14.355-280.652 Issue Correction: Please ensure you have live patching enabled. Run yum update...

Third-Party Dependency in Crowd Data Center

Note: Aligning with our security bug fix policy|https://www.atlassian.com/trust/security/bug-fix-policy, this vulnerability has been fixed in our latest release only This Critical severity Third-Party Dependency vulnerability was introduced in version 6.1.1 of Crowd Data Center. This Third-Party...

Linux Distros Unpatched Vulnerability : CVE-2024-8650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed non-member...

Malicious code in auto_release_notes (npm)

The package autoreleasenotes was found to contain malicious code...

Malicious code in @frozen-team-qa/notes-service (npm)

The package @frozen-team-qa/notes-service was found to contain malicious code...

MAL-2025-7953 Malicious code in @frozen-team-qa/notes-service (npm)

The package @frozen-team-qa/notes-service was found to contain malicious code...

Malicious code in stedin-notes (npm)

The package stedin-notes was found to contain malicious code...

Malicious code in auto_release_notes-test (npm)

The package autoreleasenotes-test was found to contain malicious code...

MAL-2025-33979 Malicious code in stedin-notes (npm)

The package stedin-notes was found to contain malicious code...

CVE-2025-8946

A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-8946

A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-8946 projectworlds Online Notes Sharing Platform login.php sql injection

A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-8946

Summary: CVE-2025-8946 affects projectworlds Online Notes Sharing Platform 1.0. The vulnerability resides in the file /login.php where manipulation of the User parameter enables SQL injection. This can be exploited remotely and the exploit has been disclosed publicly. Root cause in the provided d...

Pixel Watch Security Bulletin—January 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2025-01-01 or later address all issues in this bulletin and all issues in the January 2025 Android Security Bulletin. To learn...