Debian: Security Advisory (DSA-5900-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-32537

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry Lock Your Updates lock-your-updates allows Reflected XSS.This issue affects Lock Your Updates: from n/a through = 1.1...

Photon OS 4.0: Linux PHSA-2025-4.0-0778

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0778. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2025:3637)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:3637 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

RHEL 9 : Red Hat Ceph Storage 8.0 (RHSA-2025:3635)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3635 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a...

Photon OS 5.0: Dotnet PHSA-2025-5.0-0499

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0499. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2025-5.0-0500

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0500. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CGA-WM7V-8F64-85QV

Bulletin has no description...

CGA-3RC5-5XQH-997C

Bulletin has no description...

CGA-4R29-VRFF-785P

Bulletin has no description...

CGA-5FW3-JGVV-F82J

Bulletin has no description...

Advisory ROSA-SA-2025-2827

Software: postgresql 13.20 OS: ROSA Virtualization 3.0 packageevrstring: postgresql-13.20-1.rv30 CVE-ID: CVE-2024-10976 BDU-ID: 2024-09684 CVE-Crit: LOW CVE-DESC.: A vulnerability in the CREATE POLICY row-protected table security policy of the PostgreSQL database management system is related to a...

Advisory ROSA-SA-2025-2798

Software: flatpak 1.10.8 OS: ROSA Virtualization 3.0 packageevrstring: flatpak-1.10.8-2.rv30 CVE-ID: CVE-2023-28100 BDU-ID: 2024-04881 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the ioctl component of the Flatpak application and environment management tool is related to copying text from the...

Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink Exploit

Fortinet has revealed that threat actors have found a way to maintain read-only access to vulnerable FortiGate devices even after the initial access vector used to breach the devices was patched. The attackers are believed to have leveraged known and now-patched security flaws, including, but not...

CGA-V87M-6FR7-9QJC

Bulletin has no description...

CVE-2023-42969

An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. The issue was addressed with improved handling of caches...

CVE-2023-42961

CVE-2023-42961 describes a path-handling issue in Apple OS components that could allow a sandboxed process to circumvent sandbox restrictions. The flaw is mitigated by updated validations and is fixed in iOS 17/iPadOS 17, iOS 16.7/iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, and macOS Monter...

CVE-2023-42969

CVE-2023-42969 describes a sandbox escape whereby an app may break out of its sandbox due to improper handling of caches. Affected platforms include iOS and iPadOS prior to 17, and macOS prior to the listed versions ( Sonoma 14, Ventura 13.6, Monterey 12.7). Apple fixed the issue in iOS 17/iPadOS...

CVE-2025-32537

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry Lock Your Updates lock-your-updates allows Reflected XSS.This issue affects Lock Your Updates: from n/a through = 1.1...

CVE-2025-32537

CVE-2025-32537 corresponds to a Reflected XSS in the WordPress plugin “Lock Your Updates” (versions up to 1.1). The vulnerability is described as Improper Neutralization of Input During Web Page Generation. The connected Wordfence data confirms the entry exists and links it to the Lock Your Updat...