PT-2025-27611 · Nokia · Nokia Single Ran Baseband

Name of the Vulnerable Software and Affected Versions: Nokia Single RAN baseband software versions prior to 24R1-SR 1.0 MP Description: The issue is related to an administrative shell input validation fault in the Nokia Single RAN baseband software. An authenticated admin user can potentially...

PT-2025-27599 · Unknown · Active! Mail 6

Name of the Vulnerable Software and Affected Versions: Active! mail 6 versions 6.30.01004145 through 6.60.06008562 Description: A cross-site scripting issue exists, allowing an arbitrary script to be executed on the logged-in user's web browser when accessing a specially crafted URL...

PT-2025-27583 · One Identity · One Identity Onelogin Active Directory Connector

Name of the Vulnerable Software and Affected Versions: One Identity OneLogin Active Directory Connector versions prior to 6.1.5 Description: The issue concerns the mishandling of DirectoryToken encryption, also known as ST-812. This problem occurred due to an error in the encryption process...

PT-2025-27674

Name of the Vulnerable Software and Affected Versions: HP Universal Print Driver versions prior to 7.4 Description: The issue is related to a buffer overflow, potentially leading to a denial of service. This is a general information about the problem, and no specific details about the estimated...

PT-2025-27646 · Thycotic · Thycotic Secret Server

Name of the Vulnerable Software and Affected Versions: Thycotic Secret Server versions 11.7 and earlier Description: The issue allows an administrator to gain access to restricted tables through a SQL report creation vulnerability. Recommendations: For Thycotic Secret Server versions 11.7 and...

PT-2025-29422 · Lb Link +1 · Lb-Link Bl-Ac3600 +6

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-AC1900 LB-LINK BL-AC2100 AZ3 LB-LINK BL-AC3600 LB-LINK BL-AX1800 LB-LINK BL-AX5400P LB-LINK BL-WR9000 versions up to 20250702 Description: A critical vulnerability exists that leads to information disclosure. The vulnerability...

PT-2025-27641 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - TwoColConflict Extension versions 1.39.X through 1.39.12 Mediawiki - TwoColConflict Extension versions 1.42.X through 1.42.6 Mediawiki - TwoColConflict Extension versions 1.43.X through 1.43.1 Description: The issue is related to...

PT-2025-27606 · Nokia · Nokia Single Ran Baseband Oam Service

Name of the Vulnerable Software and Affected Versions: Nokia Single RAN baseband OAM service component versions prior to 24R1-SR 1.0 MP Description: The issue occurs when a crafted SOAP "set" operation message is sent within the Mobile Network Operator MNO internal Radio Access Network RAN...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2025-182-01)

The version of mozilla-thunderbird installed on the remote host is prior to 140.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-182-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

HP Device Manager Vulnerability Update (5.0.15)

Potential vulnerabilities have been identified in HP Device Manager versions prior to HPDM 5.0.15. HP is releasing mitigation for the potential vulnerabilities as part of 5.0.15 release. All of the identified vulnerabilities listed above were addressed and fixed as part of HP Device Manager 5.0.1...

GHSA-Q66Q-FX2P-7W4M @modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling

Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 2025.7.1 to resolve. Thank you to Elad Beber Cymulate for reporting these issues...

CGA-4394-XHFC-XWV2

Bulletin has no description...

RHSA-2025:9997 Red Hat Security Advisory: mod_proxy_cluster security update

Bulletin has no description...

RHSA-2025:9975 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2025:9751 Red Hat Security Advisory: OpenShift Container Platform 4.19.2 packages and security update

Bulletin has no description...

RHSA-2025:10006 Red Hat Security Advisory: mod_auth_openidc:2.3 security update

Bulletin has no description...

RHSA-2025:10005 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2025:10003 Red Hat Security Advisory: mod_auth_openidc:2.3 security update

Bulletin has no description...

RHSA-2025:10002 Red Hat Security Advisory: mod_auth_openidc security update

Bulletin has no description...

PT-2025-27551 · Onelogin · Onelogin Ad Connector

Name of the Vulnerable Software and Affected Versions: OneLogin AD Connector versions prior to 6.1.5 Description: A cryptographic authentication bypass issue exists due to the exposure of a tenant’s SSO JWT signing key via the "/api/adc/v4/configuration" endpoint. An attacker with the signing key...