Vulnerable OpenSSL included in cryptography wheels

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 42.0.0-44.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20250211.txt. If you are...

GHSA-79V4-65XG-PQ4G Vulnerable OpenSSL included in cryptography wheels

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 42.0.0-44.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20250211.txt. If you are...

PT-2025-6641 · Intel · Intel Mc

Name of the Vulnerable Software and Affected Versions: IntelR MLC versions prior to v3.11b Description: The issue concerns a NULL pointer dereference that may allow an authenticated user to potentially enable denial of service via local access. This could be achieved through the exploitation of t...

PT-2025-6255 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSandbox versions 3.0.0 through 3.0.7 Fortinet FortiSandbox versions 3.1.0 through 3.1.5 Fortinet FortiSandbox versions 3.2.0 through 3.2.4 Fortinet FortiSandbox versions 4.0.0 through 4.0.4 Fortinet FortiSandbox versions 4.2.0...

Azure Linux 3.0 Security Update: vim (CVE-2025-24014)

The version of vim installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24014 advisory. - Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In sile...

Ubuntu: Security Advisory (USN-7263-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

360 Product Rotation <= 1.5.8 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. PoC...

PT-2025-6635

Name of the Vulnerable Software and Affected Versions IntelR QuickAssist Technology software versions prior to 2.2.0 Description The issue is related to improper input validation, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations For...

KLA90918 PE vulnerability in Microsoft Visual Studio Code

An elevation of privilege vulnerability was found in Microsoft Visual Studio Code. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-24039 Exploitation Related products Microsoft-Visual-Studio Visual-Studio-Code Microsoft-Visual-Studio-Code CVE list...

PT-2025-6359

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier Description The issue is related to an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could...

Azure Linux 3.0 Security Update: avahi (CVE-2023-38471)

The version of avahi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38471 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the dbussethostname function...

PT-2025-6354 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-beta1 through 2.4.7-p3 Adobe Commerce versions 2.4.6-p8 Adobe Commerce versions 2.4.5-p10 Adobe Commerce versions 2.4.4-p11 and earlier Description: The issue is related to an Improper Authorization vulnerability...

Ubuntu: Security Advisory (USN-7259-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-8RGJ-285W-QCQ4 Unknown vulnerability in Coinbase Wallet SDK

Impact There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users' keys, smart contracts, or funds. Patches Please update to version = 4.3.0...

PT-2025-6215 · Coinbase · Coinbase Wallet Sdk

Name of the Vulnerable Software and Affected Versions: Coinbase Wallet SDK versions prior to 4.3.0 Description: There is a security issue in outdated versions of the software. This issue does not directly affect users' keys, smart contracts, or funds. Recommendations: Update to version 4.3.0 or...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2025-1156)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress CMS Tree Page View Plugin < 1.4 Authorization Bypass Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cmstreepageviewproject:cmstreepageview"; ifdescription...

WordPress File Manager Plugin < 5.2 Multiple SQLi Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webdesi9:filemanager"; if description...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1151)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2025-1150)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...