SUSE: Security Advisory (SUSE-SU-2025:03547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4331-1 https-everywhere - security update

Bulletin has no description...

PT-2025-41975

A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_47-default / etc (SUSE-SU-2025:03572-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03572-1 advisory. This update for the Linux Kernel 6.4.0-1506002347 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched:...

DLA-4330-1 ghostscript - security update

Bulletin has no description...

CVE-2025-49844 affecting package valkey for versions less than 8.0.6-1

CVE-2025-49844 affecting package valkey for versions less than 8.0.6-1. A patched version of the package is available...

Malicious Package

Overview mad-8.2.1.2.2.8 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

DLA-4329-1 libfcgi - security update

Bulletin has no description...

DLA-4327-1 linux - security update

Bulletin has no description...

SUSE SLES15 Security Update : podofo (SUSE-SU-2025:03533-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03533-1 advisory. - fixed a free-after-use in PdfTokenizer bsc1249105 Tenable has extracted the preceding description block directly from the SUSE security advisory. No...

CVE-2025-21048

Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code...

CVE-2025-21044

Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

[SECURITY] Fedora 41 Update: docker-buildkit-0.25.0-1.fc41

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

[SECURITY] Fedora 41 Update: wordpress-6.8.3-1.fc41

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

[SECURITY] Fedora 42 Update: wordpress-6.8.3-1.fc42

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

python-ldap 安全漏洞

python-ldap is a python foundation LDAP client API for Python. A security vulnerability exists in python-ldap versions prior to 3.4.5, which stems from the ldap.filter.escapefilterchars method not properly handling the assertionvalue parameter of type list or dict in escapemode=1 mode, which coul...

Debian: Security Advisory (DSA-6021-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4326-1 asterisk - security update

Bulletin has no description...

openSUSE Security Advisory (SUSE-SU-2025:03500-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-41506

Name of the Vulnerable Software and Affected Versions Galaxy Watch versions prior to SMR Oct-2025 Release 1 Description An issue exists with the insecure storage of sensitive information in Galaxy Watch. Local attackers may be able to access sensitive information. Recommendations Update to SMR...