Intel® Rapid Storage Technology Software Advisory

Summary: A potential security vulnerability for the Intel® Rapid Storage Technology software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24327 Description: Insecure inherited permissions fo...

Important: xmlunit

Issue Overview: XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled. CVE-2024-31573 Affected Packages: xmlunit Issue Correction: Run dnf update xmlunit...

PT-2025-46169

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager versions prior to 2.1.2.12 Description Dell Display and Peripheral Manager contains an Execution with Unnecessary Privileges issue in the Installer. A local attacker with low privileges could potentially...

Advisory ROSA-SA-2025-3044

Software: dhcp 4.4.2 OS: ROSA Virtualization 3.1 unaffected versions = dhcp-4.4.2-19.b1.rv31 affected versions dhcp-4.4.2-19.b1.rv31 CVE-ID: CVE-2021-25217 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A software vulnerability providing the DHCP Dynamic Host Configuration Protocol service to the network is...

PT-2025-45570

Name of the Vulnerable Software and Affected Versions aaPanel BaoTa versions prior to 11.1.1 Description A SQL injection issue exists in aaPanel BaoTa. The issue is located in the Backend component, specifically within the /database?action=GetDatabaseAccess endpoint. Manipulation of the Name...

CVE-2025-12875

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been...

RHSA-2025:19914 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

DLA-4366-1 swift - security update

Bulletin has no description...

RHSA-2025:19852 Red Hat Security Advisory: sssd security update

Bulletin has no description...

RHSA-2025:19847 Red Hat Security Advisory: sssd security update

Bulletin has no description...

RHSA-2025:19733 Red Hat Security Advisory: pcs security update

Bulletin has no description...

[SECURITY] Fedora 43 Update: rust-tikv-jemallocator-0.6.1-1.fc43

A Rust allocator backed by jemalloc...

[SECURITY] Fedora 43 Update: python-pydantic-core-2.41.4-1.fc43

The pydantic-core project provides the core validation logic for pydantic written in Rust...

[SECURITY] Fedora 43 Update: fastapi-cloud-cli-0.3.1-1.fc43

Deploy and manage FastAPI Cloud apps from the command line...

KLA90264 DoS vulnerability in Opera

Inappropriate implementation vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 123.0.5669.47 Stable update Related products Opera CVE list CVE-2025-12433 warning Solution Update tot he latest version Download Ope...

Optical Disc Archive Software (for Windows) registers a Windows service with an unquoted file path

Overview Optical Disc Archive Software for Windows provided by Sony Corporation contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-62225 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

Security Bulletin: NVIDIA RunAI - November 2025

NVIDIA has released a software update for NVIDIA® RunAI. To protect your system, download and install the latest version of NVIDIA RunAI by following the instructions on the documentation site. Go to NVIDIA Product Security...

RHSA-2025:19434 Red Hat Security Advisory: xorg-x11-server security update

Bulletin has no description...

Fedora 41 : openbao (2025-ab1fce816d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab1fce816d advisory. Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705. Tenable has extracted the preceding description block directly from...

CVE-2025-52665

A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later. ...