RHSA-2025:2130 Red Hat Security Advisory: emacs security update

Bulletin has no description...

RHSA-2025:2125 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

MAL-2025-2085 Malicious code in al-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa23abde2f15732ece6a95eca8e1692816abedb8fe470840b8d8fd6c1121f18d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2076 Malicious code in @cdplinetest/user-account-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4413f7fdb56d00b76c80100b70ffb2b67150c303dbce426b298acddc1dad026e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2100 Malicious code in com.github-glitchenzo.nugetforunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2641b4718102c38479e074fc167269436aadb2ff01a5b703a1c5e0a02fa09d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27219 vulnerabilities

Vulnerabilities for packages: elasticsearch, ruby, jruby, logstash...

Linux Distros Unpatched Vulnerability : CVE-2012-4159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2018-15908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files...

CVE-2025-26319

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments...

GHSA-22H5-PQ3X-2GF2 vulnerabilities

Vulnerabilities for packages: ruby3.2-faraday, ruby3.4-uri, ruby3.3-uri, logstash, ruby3.2-uri, ruby, ruby3.2-rails, ruby3.3-rails, ruby3.4-rails, jruby, kube-fluentd-operator, elasticsearch...

K000150204: PostgreSQL vulnerability CVE-2015-3166

Security Advisory Description The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified...

CGA-R452-8RRV-V4RH

Bulletin has no description...

CGA-4GRP-JPPX-774M

Bulletin has no description...

CGA-VGP6-X3R2-97P6

Bulletin has no description...

GHSA-GH9Q-2XRM-X6QV vulnerabilities

Vulnerabilities for packages: elasticsearch, ruby, jruby, logstash...

GO-2025-3459 Remote code execution in Wazuh server in github.com/wazuh/wazuh

Remote code execution in Wazuh server in github.com/wazuh/wazuh...

GO-2025-3480 Mattermost allows reading arbitrary files related to importing boards in github.com/mattermost/mattermost-server

Mattermost allows reading arbitrary files related to importing boards in github.com/mattermost/mattermost-server...

CGA-9G9F-CWVM-5PCC

Bulletin has no description...

mavo DOM Clobbering vulnerability

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2025-27422 FACTION Allows Authentication Bypass via User Creation

FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges. This is possible at any time without any authorization. The request must follow the validation rules no missing information, secure...