Advisories from national CERTs.

Oracle REST Data Services: Multiple vulnerabilities Translated from German

Oracle Secure Backup: Multiple vulnerabilities Translated from German

Oracle SQL Developer: Vulnerability threatens availability Translated from German

Atlassian products (Bamboo, Bitbucket, Confluence, Crucible, Fisheye and Jira): Multiple vulnerabilities Translated from German

expat: Vulnerability allows denial of service Translated from German

Introducing a new AI chapter in the NCSC research problem book

A revolution is underway at the intersection of AI and cyber security.

Multiple vulnerabilities in Laravel Translated from French

Multiple vulnerabilities have been discovered in Laravel. Some of them allow an attacker to cause remote denial of service, a breach of data integrity and a security policy bypass.

Multiple vulnerabilities in Mattermost Server Translated from French

Multiple vulnerabilities have been discovered in Mattermost Server. They allow an attacker to cause a security problem not specified by the vendor.

Roundcube Webmail: Multiple vulnerabilities Translated from German

Golang Go: Vulnerability allows bypassing security measures Translated from German

Red Hat Enterprise Linux (python-tornado, resteasy-core, bubblewrap, pgvector): Multiple vulnerabilities Translated from German

Froxlor: Multiple vulnerabilities Translated from German

TYPO3 Extensions: Multiple vulnerabilities Translated from German

Apache Airflow: Multiple vulnerabilities allow bypassing security measures Translated from German

vllm: Multiple vulnerabilities Translated from German

QT: Vulnerability allows denial of service Translated from German

Snipe-IT: Multiple vulnerabilities Translated from German

Laravel: Multiple vulnerabilities Translated from German

MongoDB: Vulnerability allows denial of service Translated from German

OpenBSD: Multiple vulnerabilities Translated from German

MikroTik RouterOS: Vulnerability allows denial of service Translated from German

Langflow: Multiple vulnerabilities Translated from German

Microsoft Edge: Multiple vulnerabilities allow code execution Translated from German

FreeRDP: Multiple vulnerabilities Translated from German

PostgreSQL psqlODBC Treiber: Vulnerability allows denial of service Translated from German

QT: Vulnerability allows denial of service Translated from German

MISP and MISP Modules: Multiple vulnerabilities Translated from German

Checkmk: Multiple vulnerabilities Translated from German

FFmpeg: Vulnerability allows denial of service Translated from German

Camunda: Multiple vulnerabilities Translated from German

GIMP: Multiple vulnerabilities Translated from German

MLflow: Vulnerability allows file manipulation Translated from German

IBM Security Verify Access: Vulnerability allows privilege escalation Translated from German

IBM Sterling Connect:Direct: Vulnerability allows privilege escalation Translated from German

Vulnerabilities fixed in Drupal Core and modules by Drupal Translated from Dutch

Multiple vulnerabilities in Stormshield Network Security Translated from French

Multiple vulnerabilities have been discovered in Stormshield Network Security. Some of them allow an attacker to cause a breach of data integrity, remote cross-site scripting (XSS) and a security policy bypass.

Multiple vulnerabilities in Juniper Networks Session Smart Router Translated from French

Multiple vulnerabilities have been discovered in Juniper Networks Session Smart Router. They allow an attacker to cause a security problem not specified by the vendor.

Vulnerability in Mattermost Server Translated from French

A vulnerability has been discovered in Mattermost Server. It allows an attacker to cause a security problem not specified by the vendor.

Multiple vulnerabilities in F5 products Translated from French

Multiple vulnerabilities have been discovered in F5 products. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in Roundcube Webmail Translated from French

Multiple vulnerabilities have been discovered in Roundcube Webmail. Some of them allow an attacker to cause remote arbitrary code execution, server-side request forgery (SSRF) and remote cross-site scripting (XSS).

Multiple vulnerabilities in Microsoft Edge Translated from French

Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security problem not specified by the vendor.

Red Hat Quay and Enterprise Linux (pypdf, urllib3, URI): Multiple vulnerabilities Translated from German

NoMachine: Multiple vulnerabilities allow privilege escalation Translated from German

Apache Camel: Vulnerability allows code execution Translated from German

MariaDB: Multiple vulnerabilities Translated from German

IBM App Connect Enterprise: Vulnerability allows file manipulation Translated from German

IBM i: Multiple vulnerabilities Translated from German

Fleet: Multiple vulnerabilities allow denial of service Translated from German

GIMP: Multiple vulnerabilities Translated from German

Gitea: Multiple vulnerabilities Translated from German