Alibaba Cloud Linux 3 : 0001: flatpak (ALINUX3-SA-2021:0001)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0001 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-21261: Flatpak is a system for building,...

Alibaba Cloud Linux 3 : 0060: ibus and glib2 (ALINUX3-SA-2022:0060)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0060 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-14822: A flaw was discovered in ibus in...

PT-2025-21227 · Ibm · Ibm Semeru Runtime

Name of the Vulnerable Software and Affected Versions: IBM Semeru Runtime versions 8.0.302.0 through 8.0.442.0 IBM Semeru Runtime versions 11.0.12.0 through 11.0.26.0 IBM Semeru Runtime versions 17.0.0.0 through 17.0.14.0 IBM Semeru Runtime versions 21.0.0.0 through 12.0.6.0 Description: The issu...

PT-2025-21226 · Unknown · Bonigarcia Webdrivermanager

Name of the Vulnerable Software and Affected Versions: bonigarcia webdrivermanager versions 1.0.0 through 6.0.2 Description: The issue is related to an Improper Restriction of XML External Entity Reference, allowing Data Serialization External Entities Blowup. This affects the XML parsing...

PT-2025-21195 · Drupal · Enterprise Mfa - Tfa For Drupal

Name of the Vulnerable Software and Affected Versions: Enterprise MFA - TFA for Drupal versions 0.0.0 through 4.6.x Enterprise MFA - TFA for Drupal versions 5.0.0 through 5.1.x Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in...

PT-2025-21222 · Dlib · Dlib

Name of the Vulnerable Software and Affected Versions: dlib versions prior to 19.24.7 Description: The issue allows remote attackers to cause a denial of service via a crafted file. This is a Divide By Zero vulnerability. Recommendations: For versions prior to 19.24.7, update to version 19.24.7 o...

Alibaba Cloud Linux 3 : 0127: flatpak (ALINUX3-SA-2024:0127)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0127 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-32462: Flatpak is a system for building,...

PT-2025-21218 · Unknown · A-Blog Cms

Name of the Vulnerable Software and Affected Versions: a-blog cms versions prior to 3.1.43 a-blog cms versions prior to 3.0.47 Description: A cross-site scripting issue exists in a specific field in the entry editing screen of a-blog cms, requiring contributor or higher level privileges to exploi...

PT-2025-22284 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2025.1.76253 Description: The issue is related to missing permission checks in the API, which allowed deletion of issues. Recommendations: For versions prior to 2025.1.76253, update to version 2025.1.76253...

CVE-2025-30207 Kirby vulnerable to path traversal in the router for PHP's built-in server

Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Sites that use other server software such as Apache, nginx or...

RHSA-2025:7326 Red Hat Security Advisory: rhc security update

Bulletin has no description...

RHSA-2025:7309 Red Hat Security Advisory: openjpeg2 security update

Bulletin has no description...

RHSA-2025:7147 Red Hat Security Advisory: rpm-ostree security update

Bulletin has no description...

RHSA-2025:7109 Red Hat Security Advisory: python3.11 security update

Bulletin has no description...

RHSA-2025:4793 Red Hat Security Advisory: emacs security update

Bulletin has no description...

PT-2025-21078 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: A race condition in some IntelR PROSet/Wireless WiFi Software for Windows may allow an unauthenticated user to potentially enable denial of service via...

PT-2025-21085 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: The issue is related to a use after free condition that may allow an unauthenticated user to potentially enable denial of service via adjacent access. This...

PT-2025-20866 · Mendix · Mendix Oidc Sso

Name of the Vulnerable Software and Affected Versions: Mendix OIDC SSO Mendix 10 compatible versions prior to V4.0.0 Mendix OIDC SSO Mendix 9 compatible affected versions not specified Description: A vulnerability has been identified in the Mendix OIDC SSO module, which grants read and write acce...

PT-2025-20928 · Unknown +1 · Openpubkey +1

Name of the Vulnerable Software and Affected Versions: OpenPubkey library versions prior to 0.10.0 OPKSSH versions prior to 0.5.0 Description: The issue allows a specially crafted JWS to bypass signature verification. This affects OPKSSH as it depends on the OpenPubkey library for authentication,...

PT-2025-23068 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: FortiClient Mac versions 7.0.0 through 7.0.14 FortiClient Mac versions 7.2.0 through 7.2.8 FortiClient Mac versions 7.4.0 through 7.4.2 Description: The issue is related to an Incorrect Authorization vulnerability that may allow a local...