CGA-QX79-6CVC-H6VF

Bulletin has no description...

CGA-PJJX-246H-5XF6

Bulletin has no description...

CVE-2025-24021 iTop doesn't have mass assignment of fields in the portal form

iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can set value to object fields when they're not supposed to. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue...

RHSA-2025:7502 Red Hat Security Advisory: nodejs22 security update

Bulletin has no description...

RHSA-2025:7490 Red Hat Security Advisory: mod_auth_openidc security update

Bulletin has no description...

RHSA-2025:7489 Red Hat Security Advisory: php security update

Bulletin has no description...

RHSA-2025:7438 Red Hat Security Advisory: redis security update

Bulletin has no description...

RHSA-2025:7313 Red Hat Security Advisory: keylime-agent-rust security update

Bulletin has no description...

BELL-CVE-2025-46802

Bulletin has no description...

BELL-CVE-2025-23395

Bulletin has no description...

ALSA-2025:7599 Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime...

CGA-4GPJ-334G-VX7H

Bulletin has no description...

CGA-JGMG-9FC7-367W

Bulletin has no description...

RHSA-2025:7085 Red Hat Security Advisory: pcs security update

Bulletin has no description...

ALSA-2025:7444 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

CVE-2025-44831

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface...

PT-2025-21132 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: A high-severity flaw has been identified and patched in Zoom Workplace Apps. The issue was disclosed and patched on the same day, 2025-05-13. Recommendations: At the moment, there is no...

APSB25-36 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and privilege escalation...

Moderate: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 For more details about the security issues, including the impact, a CVSS score,...

CVE-2024-48766

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php...