br.com.senior:crm-http-camel-api (>=0.0.2-alpha, <=0.0.81-alpha), br.com.senior:novasoft-http-camel-api (>=0.0.3-alpha, <=0.0.93-alpha) +2844 more potentially affected by CVE-2025-27636 via org.apache.camel:camel-support (>=3.10.0, <=3.22.3)

org.apache.camel:camel-support MAVEN version =3.10.0, =0.0.2-alpha, =0.0.3-alpha, =0.0.1-alpha, =1.0.0-alpha-1, =0.0.1-alpha, =0.0.1-alpha, =0.0.1-alpha, =0.0.1-alpha, =0.0.1-alpha, =0.0.1-alpha, =0.0.1-alpha, =18.4.0, =18.4.0, =24.17.0 and more Source cves: CVE-2025-27636 Source advisory:...

com.artnaseef:correlation-id-utils-camel-v4 (2.4.0), com.cefriel:camel-chimera-graph (>=4.0.1, <=4.6.0) +2400 more potentially affected by CVE-2025-27636 via org.apache.camel:camel-support (>=4.0.0-m1, <=4.8.4)

org.apache.camel:camel-support MAVEN version =4.0.0-m1, =4.0.1, =4.0.1, =4.0.1, =0.0.1-r2, =1.12.0, =1.1.1, =1.2.4, =1.1.0, =1.2.0, =1.0.0, =1.3.1 - com.milesight.beaveriot:dashboard-service 1.0.0 - com.milesight.beaveriot:device-api 1.0.0 and more Source cves: CVE-2025-27636 Source advisory:...

ai.wanaku:core-runtime-camel (>=0.0.4, <=0.0.5), ai.wanaku:core-services (>=0.0.2, <=0.0.3) +1706 more potentially affected by CVE-2025-27636 via org.apache.camel:camel-support (>=4.10.0, <=4.10.1)

org.apache.camel:camel-support MAVEN version =4.10.0, =0.0.4, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.5 and more Source cves: CVE-2025-27636 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-9376919...

Improper Handling of Case Sensitivity

Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to a flaw in the default filtering mechanism that only blocks headers starting with specific prefixes. An attacker can manipulate header entries to invoke arbitrary methods from the Bean registr...

com.artnaseef:correlation-id-utils-camel-v4 (2.4.0), com.cefriel:camel-chimera-graph (>=4.0.1, <=4.6.0) +2400 more potentially affected by CVE-2025-27636 via org.apache.camel:camel-support (>=4.0.0-m1, <=4.8.4)

org.apache.camel:camel-support MAVEN version =4.0.0-m1, =4.0.1, =4.0.1, =4.0.1, =0.0.1-r2, =1.12.0, =1.1.1, =1.2.4, =1.1.0, =1.2.0, =1.0.0, =1.3.1 - com.milesight.beaveriot:dashboard-service 1.0.0 - com.milesight.beaveriot:device-api 1.0.0 and more Source cves: CVE-2025-27636 Source advisory:...

ai.wanaku:core-runtime-camel (>=0.0.4, <=0.0.5), ai.wanaku:core-services (>=0.0.1, <=0.0.3) +1805 more potentially affected by CVE-2025-27636 via org.apache.camel:camel-support (>=4.9.0, <=4.10.1)

org.apache.camel:camel-support MAVEN version =4.9.0, =0.0.4, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.5 and more Source cves: CVE-2025-27636 Source advisory: MEND:CVE-2025-27636...

CVE-2025-24796

Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...

CVE-2024-13552: Improper Authorization

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.0 via file upload due to missing validation on a user controlled key. This makes it possible for authenticated attackers to...

CVE-2025-24796

Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...

CVE-2025-24796 Remote Code Execution within Collabora Online jail with Macros Enabled

Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...

CVE-2025-24796

CVE-2025-24796 affects Collabora Online. When macros are enabled, Collabora Online can download and execute arbitrarily provided binaries inside the jail, potentially bypassing network access restrictions and allowing code execution within the document‑hosted environment. The issue is mitigated b...

SUSE-RU-2025:0800-1 Recommended update for python3-M2Crypto

This update for python3-M2Crypto fixes the following issues: - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, not MIT. - Remove python-M2Crypto.keyring, because PyPI broke GPG support - Build for modern python stack on SLE/Leap - require setuptools -...

BIT-NGINX-2025-1695 NGINX Unit Java Vulnerability

In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization. This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service DoS. There...

GHSA-RFH6-9R2Q-98VF Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission

Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing config.xml of views via REST API or CLI. This allows attackers with View/Read permission to view encrypted values of secrets. Jenkins 2.500, LTS 2.492.2 redacts the encrypted values of...

PT-2025-9990

Name of the Vulnerable Software and Affected Versions Collabora Online versions prior to 22.05.25 Collabora Online versions prior to 23.05.19 Collabora Online versions prior to 24.04.12.4 Description The issue concerns Collabora Online, a collaborative online office suite based on LibreOffice. By...

CVE-2025-24796: Inclusion of Functionality from Untrusted Control Sphere

Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...

Linux Distros Unpatched Vulnerability : CVE-2024-45778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash. CVE-2024-4577...

Linux Distros Unpatched Vulnerability : CVE-2024-56639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hsr: must allocate more bytes for RedBox support Blamed commit forgot to change hsrinitskb to allocate larger skb for RedBox case. Indeed,...

Linux Distros Unpatched Vulnerability : CVE-2025-21682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: ip li set dev eth0 xdp obj...

SUSE-SU-2025:20135-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2025-0395: Fixed buffer overflow in the assert function bsc1236282. Other fixes: - Fix underallocation of abortmsgs struct - Correctly determine livepatching support - Remove nss-systemd from default nsswitch.conf bsc1233699...