CVE-2025-29813

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-26847

An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked...

CVE-2025-37823

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a potential UAF in hfscdequeue too Similarly to the previous patch, we need to safe guard hfscdequeue too. But for this one, we don't have a reliable reproducer...

Ubuntu: Security Advisory (USN-7501-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

go1.24-1.24.3-1.1 on GA media (moderate)

go1.24-1.24.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15058-1 Rating: moderate Cross-References: CVE-2025-22873 CVSS scores: CVE-2025-22873 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2025-22873 SUSE : 2 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N...

govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media Announcement ID: openSUSE-SU-2025:15059-1 Rating: moderate Cross-References: CVE-2019-11243 CVE-2023-32198 CVE-2024-22031 CVE-2025-23390 CVE-2025-32777 CVE-2025-3879 CVE-2025-4166 CVE-2025-4210 CVE-2025-46327 CVE-2025-46342 CVE-2025-46569...

perl-DateTime-TimeZone bug fix and enhancement update

An update is available for perl-DateTime-TimeZone. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

CVE-2025-32873

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

PT-2025-20189 · Unknown · Easy Paypal Buy Now Button

Name of the Vulnerable Software and Affected Versions: Easy PayPal Buy Now Button versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-20078 · WordPress · Wpadverts

Name of the Vulnerable Software and Affected Versions: WPAdverts versions through 2.2.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a ty...

PT-2025-20178 · Unknown · Igor Benic Simple Giveaways

Name of the Vulnerable Software and Affected Versions: Igor Benic Simple Giveaways versions n/a through 2.48.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions n/a...

PT-2025-20105 · Unknown · Jupiter X Core

Name of the Vulnerable Software and Affected Versions: JupiterX Core versions through 4.8.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-20139 · Unknown · Accept Donations With Paypal

Name of the Vulnerable Software and Affected Versions: Accept Donations with PayPal versions 1.4.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

CVE-2025-46731

Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and ALLOWADMINCHANGES must be enabled for this to work...

CVE-2024-58237

In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers. Making...

CVE-2025-21919 affecting package kernel for versions less than 5.15.180.1-1

CVE-2025-21919 affecting package kernel for versions less than 5.15.180.1-1. An upgraded version of the package is available that resolves this issue...

Fedora 41 : rust-hickory-proto (2025-def79f4594)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-def79f4594 advisory. Update to version 0.24.4. Also contains fixes for RUSTSEC-2025-0006. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2023-53129

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53070

In the Linux kernel, the following vulnerability has been resolved: ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent Commit 0c80f9e165f8 "ACPI: PPTT: Leave the table mapped for the runtime usage" enabled to map PPTT once on the first invocation of acpigetpptt and never...

CVE-2023-53124

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sastransportportadd Port is allocated by sasportallocnum and rphy is allocated by either sasenddevicealloc or sasexpanderalloc, all of which may return NULL. So we need to check the...