41351 matches found
CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1
CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...
[SECURITY] Fedora 41 Update: fcgi-2.4.7-1.fc41
FastCGI is a language independent, scalable, open extension to CGI that provides high performance without the limitations of server specific APIs...
Debian: Security Advisory (DSA-6071-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4395-1 krita - security update
Bulletin has no description...
CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1
CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-64720 affecting package libpng for versions less than 1.6.51-1
CVE-2025-64720 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1
CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-64505 affecting package libpng for versions less than 1.6.51-1
CVE-2025-64505 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...
Cloudflare Has Blocked 416 Billion AI Bot Requests Since July 1
Cloudflare CEO Matthew Prince claims the internet infrastructure company’s efforts to block AI crawlers are already seeing big results...
AZL-71513 CVE-2025-65637 affecting package containerized-data-importer for versions less than 1.62.0-1
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...
AZL-71420 CVE-2025-40251 affecting package kernel for versions less than 6.6.119.3-1
In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devlratenodesdestroy The function devlratenodesdestroy is documented to "Unset parent for all rate objects". However, it was only calling the driver-specific rateleafparentset or...
Remote Code Execution (RCE)
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Remote Code Execution RCE due to insufficient isolation in the Python Code Node that uses Pyodide. An authenticated attacker with permissions to create or modify workflows can execute arbitrary...
e-point CMS 安全漏洞
e-point CMS is a content management system from e-point Poland. A security vulnerability exists in e-point CMS eagle.gsam-1169.1 version, which stems from the file upload feature not adequately validating archived content, which could lead to remote code execution...
DLA-4394-1 webkit2gtk - security update
Bulletin has no description...
Debian: Security Advisory (DSA-6070-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-4394-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AZL-71221 CVE-2025-66453 affecting package rhino for versions less than 1.7.15.1-1
Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...
CVE-2025-58478
Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory...
SUSE SLES12: glib2-devel / glib2-devel-static / glib2-lang / glib2-tools / etc (SUSE-SU-2025:4278-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:4278-1 advisory. - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via gettmpfile bsc1249055 Tenable has extracted the preceding description...