Security update for grafana

This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: Security issues fixed: CVE-2024-45339: Fixed vulnerability when creating log files bsc1236559 CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration bsc1236734 CVE-2025-21613: Remove...

CVE-2024-34521: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an administrative user to access system files with the file permissions of the privileged system user running the application...

CVE-2024-34520: Authorization Bypass Through User-Controlled Key

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls...

PT-2025-6645

Name of the Vulnerable Software and Affected Versions Mavenir SCE Application Provisioning Portal version PORTAL-LBS-R 1 0 24 0 Description A directory traversal issue exists in the portal, allowing an administrative user to access system files with the file permissions of the privileged system...

Mavenir SCE Application Provisioning Portal 安全漏洞

Mavenir SCE Application Provisioning Portal is an application provisioning portal from Mavenir USA. A security vulnerability exists in the Mavenir SCE Application Provisioning Portal PORTAL-LBS-R10240 version, which originates from a client-side access control bypass that results in unauthorized...

PT-2025-6644

Name of the Vulnerable Software and Affected Versions Mavenir SCE Application Provisioning Portal version PORTAL-LBS-R 1 0 24 0 Description The issue concerns an authorization bypass in the Mavenir SCE Application Provisioning Portal. This allows an authenticated 'guest' user to perform...

CVE-2025-24656

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Realtyna Realtyna Provisioning realtyna-provisioning allows Reflected XSS.This issue affects Realtyna Provisioning: from n/a through = 1.2.2...

CVE-2021-31581

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version 3.0 and later,...

authentik 安全漏洞

authentik is an open source identity provisioning application from authentik open source. A security vulnerability exists in authentik that stems from vulnerability to stored cross-site scripting attacks...

CVE-2025-24656

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Realtyna Realtyna Provisioning realtyna-provisioning allows Reflected XSS.This issue affects Realtyna Provisioning: from n/a through = 1.2.2...

CVE-2025-24656

CVE-2025-24656 is a reflected XSS vulnerability affecting Realtyna Provisioning (WordPress plugin) versions up to 1.2.2. The issue arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. The CVSS 3.1 base score is 7.1 (HIGH), with attack vect...

CVE-2025-24656 WordPress Realtyna Provisioning Plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Realtyna Realtyna Provisioning allows Reflected XSS. This issue affects Realtyna Provisioning: from n/a through 1.2.2...

CVE-2025-24656 WordPress Realtyna Provisioning Plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Realtyna Realtyna Provisioning realtyna-provisioning allows Reflected XSS.This issue affects Realtyna Provisioning: from n/a through = 1.2.2...

PT-2025-5477 · Realtyna · Realtyna Provisioning

Name of the Vulnerable Software and Affected Versions: Realtyna Provisioning versions 1.2.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows Reflected XSS. This can be exploited to execute malicious scripts on the victim's...

WordPress plugin Realtyna Provisioning 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

CVE-2025-24656: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Realtyna Realtyna Provisioning realtyna-provisioning allows Reflected XSS.This issue affects Realtyna Provisioning: from n/a through = 1.2.2...

Win11 24H2/WS2025 machines not getting registered from Provisioning Catalog created in Citrix Studio

Win 11 24H2 VDAssingle session/Windows Server 2025 machines are not getting registered when machines created via Provisioning Catalog from Citrix Studio/Powershell commands LCM-16630 Applicable Products Virtual Apps and Desktops 7 2411...

Important: Red Hat Bug Fix Advisory: LVMS 4.17.4 Bug Fix Update

Updated container images that fix multiple bugs are now available for LVMS 4.17 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 18.0.4 (openstack-ironic) security update

An update for openstack-ironic is now available for Red Hat OpenStack Platform 18.0.4 Antelope. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

SUSE CVE-2025-21664

In the Linux kernel, the following vulnerability has been resolved: dm thin: make getfirstthin use rcu-safe list first function The documentation in rculist.h explains the absence of listemptyrcu and cautions programmers against relying on a listempty - listfirst sequence in RCU safe code. This i...