RHSA-2025:8916 Red Hat Security Advisory: grafana-pcp security update

Bulletin has no description...

RHSA-2025:8844 Red Hat Security Advisory: mod_security security update

Bulletin has no description...

RHSA-2025:8837 Red Hat Security Advisory: mod_security security update

Bulletin has no description...

PT-2025-25355 · Dell · Idrac Tools

Name of the Vulnerable Software and Affected Versions: Dell iDRAC Tools versions prior to 11.3.0.0 Description: The issue is related to an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...

PT-2025-25334

Name of the Vulnerable Software and Affected Versions InstallShield versions 2021 R2 through 2023 R2 Description A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. Recommendations For...

PT-2025-25358 · Pcsx2 +1 · Pcsx2 +1

Name of the Vulnerable Software and Affected Versions: PCSX2 versions up to 2.3.414 Description: A stack-based buffer overflow exists in the Kprintf HLE function. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled I...

PT-2025-25331 · Dell · Dell Smart Dock Firmware

Name of the Vulnerable Software and Affected Versions: Dell Smart Dock Firmware versions prior to 01.00.08.01 Description: The issue concerns an Insertion of Sensitive Information into Log File, which could be exploited by a user with local access, potentially leading to information disclosure...

DLA-4215-1 ublock-origin - security update

Bulletin has no description...

MINI-2WH7-V592-VHCJ

Bulletin has no description...

MGASA-2025-0185 Updated roundcubemail packages fix security vulnerability

A Post-Auth RCE was announced and fixed in the latest release...

CVE-2025-49006

Wasp Web Application Specification is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6, Wasp authentication has a vulnerability in the OAuth authentication implementation affecting only Keycloak with a specific config. Wasp currently lowercases OAuth user IDs before...

RHSA-2025:8812 Red Hat Security Advisory: .NET 8.0 security update

Bulletin has no description...

RHSA-2025:8784 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:8737 Red Hat Security Advisory: golang security update

Bulletin has no description...

CVE-2025-5991

There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a POST request and the simultaneous...

[SECURITY] Fedora 42 Update: qt6-qtwebsockets-6.9.1-1.fc42

The QtWebSockets module implements the WebSocket protocol as specified in RFC 6455. It solely depends on Qt no external dependencies...

[SECURITY] Fedora 42 Update: libqtxdg-4.1.0-6.fc42

QtXdg, a Qt5 implementation of XDG standards...

Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the software update verification process. The issue results fr...

PT-2025-25235 · Palo Alto Networks · Globalprotect

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect versions prior to 6.2.8-h2 on macOS Description: An improper neutralization of wildcards vulnerability in the log collection feature of the Palo Alto Networks GlobalProtect app on macOS allows a...

PT-2025-25366 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.11 before 17.11.4 and 18.0 before 18.0.2 Description: A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group. The vulnerability in GitLa...