Security update for xwayland

This update for xwayland fixes the following issues: CVE-2025-26594: Use-after-free of the root cursor bsc1237427. CVE-2025-26595: Buffer overflow in XkbVModMaskText bsc1237429. CVE-2025-26596: Heap overflow in XkbWriteKeySyms bsc1237430. CVE-2025-26597: Buffer overflow in XkbChangeTypesOfKey...

CVE-2025-1517: Improper Neutralization of Input During Web Page Generation

The Sina Extension for Elementor Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fancy Text, Countdown Widget, and Login Form shortcodes in all versions up to,...

PT-2025-8736 · Unknown · Met One 3400+

Name of the Vulnerable Software and Affected Versions: MET ONE 3400+ version 1.0.41 Description: The issue concerns the temporary storage of credentials in plain text within the system under rare conditions. This data is not accessible to unauthenticated users. Recommendations: For version 1.0.41...

Beckman Coulter MET ONE 3400+ instruments running software security vulnerabilities

Beckman Coulter MET ONE 3400+ instruments running software is a software for MET ONE 3400 + instruments running from Beckman Coulter, USA. SOP programs can be customized to automate cleanroom monitoring. Beckman Coulter MET ONE 3400+ instruments running software A security vulnerability exists in...

CVE-2025-0941: Generation of Error Message Containing Sensitive Information

MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users...

WordPress Sina Extension for Elementor plugin <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes vulnerability discovered by zer0gh0st in WordPress Plugin Sina Extension for Elementor versions = 3.6.0...

CVE-2025-26904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in galop WP Responsive Auto Fit Text wp-responsive-slab-text allows DOM-Based XSS.This issue affects WP Responsive Auto Fit Text: from n/a through = 0.2...

CVE-2025-26904

CVE-2025-26904 concerns the WordPress plugin WP Responsive Auto Fit Text. According to Wordfence vulnerability data, this entry represents an authenticated, stored cross-site scripting (XSS) vulnerability in WP Responsive Auto Fit Text versions up to 0.2, exploitable via the npc shortcode. The im...

GHSA-R9RH-GW7V-GGVQ vulnerabilities

Vulnerabilities for packages: openjdk-17-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-21-openj9...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.1 security and extras update

Red Hat OpenShift Container Platform release 4.18.1 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...

CVE-2025-26904: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in galop WP Responsive Auto Fit Text wp-responsive-slab-text allows DOM-Based XSS.This issue affects WP Responsive Auto Fit Text: from n/a through = 0.2...

PT-2025-7843

Name of the Vulnerable Software and Affected Versions WP Responsive Auto Fit Text versions 0.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a DOM-Based XSS...

UBUNTU-CVE-2025-26528

The drag-and-drop onto image ddimageortext question type required additional sanitizing to prevent a stored XSS risk...

CVE-2025-26883

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through = 1.0.7...

WordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Animated Text Block versions = 1.0.7...

CVE-2025-26883 WordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through = 1.0.7...

CVE-2025-26883

CVE-2025-26883 documents a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin Animated Text Block (affected: 1.0.7 and earlier). The issue arises from improperly configured access control, enabling an attacker to perform unauthorized actions that current description...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

PT-2025-7719

Name of the Vulnerable Software and Affected Versions bPlugins Animated Text Block versions 1.0.0 through 1.0.7 Description The issue is related to a Missing Authorization vulnerability in bPlugins Animated Text Block, which allows exploiting incorrectly configured access control security levels...