Important: dotnet8.0

Issue Overview: Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2025-24070 Affected Packages: dotnet8.0 Issue Correction: Run dnf update dotnet8.0 --releasever 2023.7.20250331 to update your system. New Packages: aarch6...

PT-2025-14182 · Publitio · Publitio

Name of the Vulnerable Software and Affected Versions: Publitio versions 2.1.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For Publitio versions 2.1...

PT-2025-14180 · Boldgrid · Boldgrid Sprout Clients

Name of the Vulnerable Software and Affected Versions: BoldGrid Sprout Clients versions 3.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-14095

Name of the Vulnerable Software and Affected Versions MongoDB versions prior to 5.0.31 MongoDB versions prior to 6.0.20 MongoDB versions prior to 7.0.16 Description Specifically crafted MongoDB wire protocol messages can cause MongoDB to crash during command validation. This issue can occur witho...

PT-2025-14142 · Dobsondev · Dobsondev Shortcodes

Name of the Vulnerable Software and Affected Versions: DobsonDev Shortcodes versions 2.1.12 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-14272 · WordPress · Wp Profitshare

Name of the Vulnerable Software and Affected Versions: WP Profitshare versions 1.4.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in WP Profitshare. Recommendations: For versions 1.4.9 and earlier, update to a version that...

PT-2025-14258

Name of the Vulnerable Software and Affected Versions WebinarPress versions 1.33.27 and earlier Description The issue is related to a Missing Authorization vulnerability in WPWebinarSystem WebinarPress, which allows exploiting incorrectly configured access control security levels. Recommendations...

Azure Linux 3.0 Security Update: libxslt (CVE-2024-55549)

The version of libxslt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-55549 advisory. - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result...

Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2025-006)

The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2025-006 advisory. LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An...

PT-2025-14252 · Unknown · Pluginic Fancypost

Name of the Vulnerable Software and Affected Versions: Pluginic FancyPost versions n/a through 6.0.1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS in Pluginic FancyPost...

Low: python3.9

Issue Overview: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header bein...

PT-2025-14237 · WordPress · Wp Adcenter

Name of the Vulnerable Software and Affected Versions: WP AdCenter versions 2.5.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-14185 · Unknown · Neteuro Turisbook Booking System

Name of the Vulnerable Software and Affected Versions: Neteuro Turisbook Booking System versions 1.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

XWiki 5.4-rc-1 < 15.10.15, 16.x < 16.4.6, 16.5.x < 16.10.0 Improper Authorization Vulnerability (GHSA-gfp2-6qhm-7x43)

Xwiki is prone to an improper authorization vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

Ubuntu: Security Advisory (USN-7400-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4098-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4100-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1330)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for proftpd (EulerOS-SA-2025-1339)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2025-1314)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...