12580 matches found
PT-2025-27591 · WordPress · Ads Pro Plugin
Name of the Vulnerable Software and Affected Versions: Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager versions up to 4.89 Description: The issue is related to a time-based SQL injection vulnerability. It occurs due to insufficient escaping of the user-supplied bsa pro id parameter a...
PT-2025-27609 · Unknown · Nokia Single Ran Baseband Oam Service
Name of the Vulnerable Software and Affected Versions: Single RAN baseband OAM service versions prior to 24R1-SR 0.2 MP Description: The Single RAN baseband OAM service is intended to run as an unprivileged service but initially starts with root privileges and assigns certain capabilities before...
HPESBNW04886 rev.1 - HPE Telco Service Orchestrator Software, Server-Side Request Forgery (SSRF) Vulnerability
Potential Security Impact: Remote: Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v5.3.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-27817 |...
PT-2025-27583 · One Identity · One Identity Onelogin Active Directory Connector
Name of the Vulnerable Software and Affected Versions: One Identity OneLogin Active Directory Connector versions prior to 6.1.5 Description: The issue concerns the mishandling of DirectoryToken encryption, also known as ST-812. This problem occurred due to an error in the encryption process...
PT-2025-27599 · Unknown · Active! Mail 6
Name of the Vulnerable Software and Affected Versions: Active! mail 6 versions 6.30.01004145 through 6.60.06008562 Description: A cross-site scripting issue exists, allowing an arbitrary script to be executed on the logged-in user's web browser when accessing a specially crafted URL...
PT-2025-27674
Name of the Vulnerable Software and Affected Versions: HP Universal Print Driver versions prior to 7.4 Description: The issue is related to a buffer overflow, potentially leading to a denial of service. This is a general information about the problem, and no specific details about the estimated...
PT-2025-29422 · Lb Link +1 · Lb-Link Bl-Ac3600 +6
Name of the Vulnerable Software and Affected Versions: LB-LINK BL-AC1900 LB-LINK BL-AC2100 AZ3 LB-LINK BL-AC3600 LB-LINK BL-AX1800 LB-LINK BL-AX5400P LB-LINK BL-WR9000 versions up to 20250702 Description: A critical vulnerability exists that leads to information disclosure. The vulnerability...
PT-2025-27606 · Nokia · Nokia Single Ran Baseband Oam Service
Name of the Vulnerable Software and Affected Versions: Nokia Single RAN baseband OAM service component versions prior to 24R1-SR 1.0 MP Description: The issue occurs when a crafted SOAP "set" operation message is sent within the Mobile Network Operator MNO internal Radio Access Network RAN...
PT-2025-27641 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - TwoColConflict Extension versions 1.39.X through 1.39.12 Mediawiki - TwoColConflict Extension versions 1.42.X through 1.42.6 Mediawiki - TwoColConflict Extension versions 1.43.X through 1.43.1 Description: The issue is related to...
PT-2025-27646 · Thycotic · Thycotic Secret Server
Name of the Vulnerable Software and Affected Versions: Thycotic Secret Server versions 11.7 and earlier Description: The issue allows an administrator to gain access to restricted tables through a SQL report creation vulnerability. Recommendations: For Thycotic Secret Server versions 11.7 and...
HP Device Manager Vulnerability Update (5.0.15)
Potential vulnerabilities have been identified in HP Device Manager versions prior to HPDM 5.0.15. HP is releasing mitigation for the potential vulnerabilities as part of 5.0.15 release. All of the identified vulnerabilities listed above were addressed and fixed as part of HP Device Manager 5.0.1...
Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2025-182-01)
The version of mozilla-thunderbird installed on the remote host is prior to 140.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-182-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...
GHSA-Q66Q-FX2P-7W4M @modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling
Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 2025.7.1 to resolve. Thank you to Elad Beber Cymulate for reporting these issues...
CGA-4394-XHFC-XWV2
Bulletin has no description...
RHSA-2025:9997 Red Hat Security Advisory: mod_proxy_cluster security update
Bulletin has no description...
RHSA-2025:9975 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Bulletin has no description...
RHSA-2025:9751 Red Hat Security Advisory: OpenShift Container Platform 4.19.2 packages and security update
Bulletin has no description...
RHSA-2025:10006 Red Hat Security Advisory: mod_auth_openidc:2.3 security update
Bulletin has no description...