SUSE CVE-2025-55668

Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.55 security and extras update

Red Hat OpenShift Container Platform release 4.14.55 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

PT-2025-33399 · WordPress · Wp Table Builder

Name of the Vulnerable Software and Affected Versions: WP Table Builder versions through 2.0.12 Description: The software contains a Stored Cross-Site Scripting XSS issue. This allows for the injection of malicious scripts into web pages generated by the application. Recommendations: Update WP...

Active Storage allowed transformation methods that were potentially unsafe

Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allowing for the circumvention of the safe defaults which enables potential command injection vulnerabilities in cases where...

PT-2025-33230 · Unknown · Easy Form Builder

Name of the Vulnerable Software and Affected Versions: Easy Form Builder versions through 3.8.15 Description: The software contains an improper neutralization of special elements used in an SQL command, resulting in a blind SQL injection issue. Recommendations: Update Easy Form Builder to a versi...

PT-2025-33209 · WordPress · Webcodingplace Responsive Posts Carousel

Name of the Vulnerable Software and Affected Versions: WebCodingPlace Responsive Posts Carousel WordPress Plugin versions through 15.0 Description: The vulnerability involves improper control of filename handling for include/require statements in a PHP program, specifically a PHP Local File...

Path traversal vulnerability on non-compliant Servlet containers

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not...

Debian dsa-5977 : aide - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5977 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5977-1 [email protected]...

Debian dla-4272 : aide - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4272 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4272-1 [email protected]...

PT-2025-33284 · Rockwell Automation · Factorytalk® Viewpoint

Name of the Vulnerable Software and Affected Versions: FactoryTalk ViewPoint versions 14.0 and earlier Description: A security issue exists in FactoryTalk ViewPoint due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs...

GHSA-XVR7-P2C6-J83W swift-nio-http2 affected by HTTP/2 MadeYouReset vulnerability

The HTTP/2 MadeYouReset vulnerability has a mild effect on swift-nio-http2. swift-nio-http2 mostly protects against MadeYouReset by using a number of existing denial-of-service prevention patterns that we added in response to the RapidReset vulnerabilities. The result is that servers are not...

GHSA-GQP3-2CVR-X8M3 Apache Tomcat Improper Resource Shutdown or Release vulnerability

Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.9, from 10.1.0-M1 through 10.1.43 and from 9.0.0.M1 through 9.0.107. Older, EOL versions may also be affected...

DEBIAN-CVE-2025-55668

Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 ...

[SECURITY] [DSA 5974-1] pgpool2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5974-1 [email protected] https://www.debian.org/security/ Aron Xu August 13, 2025 https://www.debian.org/security/faq -...

Third-Party Dependency in Bitbucket Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 8.19.0, 9.4.0, and 9.6.0 of Bitbucket Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an...

Ubuntu: Security Advisory (USN-7682-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

August 12, 2025—KB5063948 (Security-only update)

None None...

PT-2025-32949 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8 through 2022.6 Description: Adobe Framemaker is susceptible to a Use After Free issue that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user ...

Debian dsa-5972 : openjdk-17-dbg - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5972 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5972-1 [email protected] https://www.debian.org/securit...

TinyCBOR Library Advisory

Summary: Potential security vulnerabilities in the TinyCBOR library maintained by Intel® may allow elevation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities . Vulnerability Details: CVEID: CVE-2025-24302 Description: Uncontrolled...