PT-2025-16181 · Shuanx · Burpapifinder

Name of the Vulnerable Software and Affected Versions: shuanx BurpAPIFinder versions up to 2.0.2 Description: A vulnerability has been found in shuanx BurpAPIFinder, affecting an unknown functionality of the file BurpApiFinder.db. The manipulation leads to denial of service. The attack can be...

DLA-4126-1 jinja2 - security update

Bulletin has no description...

CGA-43X3-MXJ2-GPJF

Bulletin has no description...

CGA-H52H-VQ4V-WHVC

Bulletin has no description...

MGASA-2025-0132 Updated graphicsmagick packages fix security vulnerabilities

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. CVE-2025-27795...

DLA-4123-1 wpa - security update

Bulletin has no description...

Advisory ROSA-SA-2025-2844

Software: gtk3 3.22.30 OS: ROSA Virtualization 2.1 packageevrstring: gtk3-3.22.30-12.rv3 CVE-ID: CVE-2024-6655 BDU-ID: 2024-06447 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the GTK graphical user interface creation library GIMP Toolkit is related to mismanagement of code generation...

Advisory ROSA-SA-2025-2839

Software: dnsmasq 2.79 OS: ROSA Virtualization 2.1 packageevrstring: dnsmasq-2.79-33.0.1.rv3 CVE-ID: CVE-2020-25682 BDU-ID: 2021-01118 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the extractname function rfc1035.c of the dnsmasq DNS server is related to a buffer overflow in dynamic memory...

Advisory ROSA-SA-2025-2832

Software: avahi 0.7 OS: ROSA Virtualization 2.1 packageevrstring: avahi-0.7-21.0.1.rv3 CVE-ID: CVE-2023-1981 BDU-ID: 2023-03858 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Avahi Local Area Network Service Discovery System involves uncontrolled resource consumption. Exploitation of the...

Advisory ROSA-SA-2025-2810

Software: libxml2 2.9.7 OS: ROSA Virtualization 3.0 packageevrstring: libxml2-2.9.7-19.rv30 CVE-ID: CVE-2024-56171 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Vulnerability in libxml2: use-after-free in xmlschemas.c. CVE-STATUS: Vulnerability resolved. CVE-REV: To close the vulnerability, run the...

Advisory ROSA-SA-2025-2797

Software: expat 2.2.5 OS: ROSA Virtualization 3.0 packageevrstring: expat-2.2.5-16.0.1.rv30 CVE-ID: CVE-2022-23990 BDU-ID: 2022-00999 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the doProlog function of the Expat library is related to integer overflow. Exploitation of the vulnerability could...

Advisory ROSA-SA-2025-2794

Software: cups 2.2.6 OS: ROSA Virtualization 3.0 packageevrstring: cups-2.2.6-62.rv30 CVE-ID: CVE-2024-47175 BDU-ID: 2024-07645 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the ppdCreatePPDFromIPP2 function of the CUPS print server libppd library is related to failure to take measures to...

PT-2025-16126 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: Processing a file may lead to a denial-of-service or potentially disclose memory contents. The issue was addressed with improved checks. Recommendations: For versions prior to 14, update to macOS 14 to...

PT-2025-16142 · Mediawiki · Mediawiki

Name of the Vulnerable Software and Affected Versions: Mediawiki - Version Compare Extension versions 1.39 through 1.43 Description: The issue is related to Improper Encoding or Escaping of Output, which allows Cross-Site Scripting XSS in the Mediawiki - Version Compare Extension. Recommendations...

PT-2025-16048 · Unknown · Wpsmartcontracts

Name of the Vulnerable Software and Affected Versions: WPSmartContracts versions prior to 2.0.10 Description: The issue is related to an improper neutralization of special elements used in an SQL command, allowing Blind SQL Injection. This enables an attacker to inject malicious SQL code,...

PT-2025-16049 · Unknown · N-Media Bulk Product Sync

Name of the Vulnerable Software and Affected Versions: N-Media Bulk Product Sync versions n/a through 8.6 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...

PT-2025-16041 · WordPress · Mailhawk

Name of the Vulnerable Software and Affected Versions: Adrian Tobey WordPress SMTP Service, Email Delivery Solved! — MailHawk versions 1.3.1 and earlier Description: The issue is related to improper control of filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File...

PT-2025-16082 · Unknown · Twispay Credit Card Payments

Name of the Vulnerable Software and Affected Versions: Twispay Credit Card Payments versions 2.1.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that an attacker can...

PT-2025-16078 · Unknown · Odude Flexi – Guest Submit

Name of the Vulnerable Software and Affected Versions: odude Flexi – Guest Submit versions 4.28 and earlier Description: The issue is related to an improper control of filename for include/require statement in a PHP program, also known as PHP Remote File Inclusion, which allows PHP Local File...

PT-2025-16089 · Unknown · Oxygensuite Oxygen Mydata For Woocommerce

Name of the Vulnerable Software and Affected Versions: Oxygensuite Oxygen MyData for WooCommerce versions 1.0.0 through 1.0.63 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows unauthorized access to...