RHSA-2025:8630 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:8628 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:8626 Red Hat Security Advisory: mod_security security update

Bulletin has no description...

Advisory ROSA-SA-2025-2888

Software: jose 10 OS: ROSA Virtualization 3.0 packageevrstring: jose-10-2.rv30.3 CVE-ID: CVE-2023-50967 BDU-ID: 2024-02461 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the C language module for signing and encrypting JSON latchset Jose objects is associated with uncontrolled resource consumption...

Advisory ROSA-SA-2025-2886

Software: freetype 2.9.1 OS: ROSA Virtualization 3.0 packageevrstring: freetype-2.9.1-10.rv30 CVE-ID: CVE-2025-27363 BDU-ID: 2025-02719 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the FreeType font rasterization library is related to reading beyond buffer boundaries in memory. Exploitation of th...

Advisory ROSA-SA-2025-2884

Software: libwebp 1.0.0 OS: ROSA Virtualization 2.1 packageevrstring: libwebp-1.0.0.0-10.0.1.rv3 CVE-ID: CVE-2018-25013 BDU-ID: 2021-03103 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the libwebp library for WebP image encoding and decoding is related to reading beyond buffer boundaries in...

Advisory ROSA-SA-2025-2879

Software: krb5 1.18.2 OS: ROSA Virtualization 2.1 packageevrstring: krb5-1.18.2-32.rv3 CVE-ID: CVE-2020-28196 BDU-ID: 2023-03437 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Kerberos network protocol implementation of the Debian GNU/Linux, Red Hat Enterprise Linux, Ubuntu, Fedora, Alt 8 SP...

Advisory ROSA-SA-2025-2880

Software: libjpeg-turbo 1.5.3 OS: ROSA Virtualization 2.1 packageevrstring: libjpeg-turbo-1.5.3-14.rv3 CVE-ID: CVE-2020-13790 BDU-ID: 2021-01352 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the startinputppm function from rdppm.c of the libjpeg-turbo image manipulation library is related to a...

Advisory ROSA-SA-2025-2876

Software: expat 2.2.5 OS: ROSA Virtualization 2.1 packageevrstring: expat-2.2.5-17.0.1.rv3 CVE-ID: CVE-2024-8176 BDU-ID: 2025-04573 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to a stack-based buffer overflow. Exploitation of the vulnerability cou...

Advisory ROSA-SA-2025-2881

Software: libsoup 2.62.3 OS: ROSA Virtualization 2.1 packageevrstring: libsoup-2.62.3-9.rv3 CVE-ID: CVE-2025-2784 BDU-ID: 2025-05737 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the skipinsightwhitespace function of the GNOME GUI libsoup library is related to reading beyond buffer boundaries in...

PT-2025-24516 · Spicethemes · Spice Blocks

Name of the Vulnerable Software and Affected Versions: spicethemes Spice Blocks versions n/a through 2.0.7.2 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in spicethemes Spice...

PT-2025-24434 · Codepen +1 · Codepen +1

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.4.4 Discourse version 3.5.0.beta5 and earlier of the beta branch Discourse version 3.5.0.beta6-dev and earlier of the tests-passed branch Description: Discourse is an open-source discussion platform. In versions...

PT-2025-24499 · Unknown · Quitenicestuff Soho Hotel

Name of the Vulnerable Software and Affected Versions: quitenicestuff Soho Hotel versions through 4.2.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions throu...

PT-2025-24486 · Themeton · Themeton Pressgrid - Frontend Publish Reaction & Multimedia Theme

Name of the Vulnerable Software and Affected Versions: themeton PressGrid - Frontend Publish Reaction & Multimedia Theme versions 1.3.1 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches...

PT-2025-24438

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.9.11 Description The issue concerns the Sandbox container in FastGPT, which has insufficient isolation and inadequate restrictions on code execution. This allows attackers to escape the intended sandbox boundaries b...

PT-2025-24491 · Lambertgroup · Lambertgroup Shout

Name of the Vulnerable Software and Affected Versions: LambertGroup SHOUT versions n/a through 3.5.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-24537

Name of the Vulnerable Software and Affected Versions Mikado-Themes GrandPrix versions 1.6 and earlier Description The issue is related to a Path Traversal vulnerability that allows PHP Local File Inclusion. This vulnerability enables an attacker to access and potentially execute local files on t...

PT-2025-24507 · Romancode · Mapsvg

Name of the Vulnerable Software and Affected Versions: MapSVG versions n/a through 8.5.34 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in RomanCode MapSVG. Recommendations: For versions n/a through 8.5.34, update to a...

PT-2025-24513 · Unknown · Spreadsheet Price Changer For Woocommerce/Wp E-Commerce – Light

Name of the Vulnerable Software and Affected Versions: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions 2.4.37 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows a...

PT-2025-24476 · Apptha · Apptha Slider Gallery

Name of the Vulnerable Software and Affected Versions: Apptha Slider Gallery versions n/a through 2.5 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the Apptha Slider Gallery...