K000151130: GnuTLS vulnerability CVE-2024-12243

Security Advisory Description A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote...

CVE-2025-44839

creationtimestamp| type| source ---|---|--- 2025-05-01 17:15:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14332 2025-05-01 20:41:54+00:00| seen| https://t.me/cvedetector/24255...

AZL-69914 CVE-2022-49829 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: fix fence ref counting We leaked dependency fences when processes were beeing killed. Additional to that grab a reference to the last scheduled fence...

CVE-2022-38387

creationtimestamp| type| source ---|---|--- 2025-05-01 14:15:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14292...

CVE-2025-4099

creationtimestamp| type| source ---|---|--- 2025-05-01 05:14:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14236 2025-05-01 05:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo3mslbkuk2k 2025-05-01 08:58:36+00:00| seen|...

DLA-4150-1 u-boot - security update

Bulletin has no description...

Debian: Security Advisory (DLA-4149-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-18687 · Gotenna · Gotenna

Name of the Vulnerable Software and Affected Versions: goTenna v1 with application 5.5.3 and firmware 0.25.5 Description: A problem was detected in goTenna v1 devices, where a command channel includes the next hop, which can be intercepted and used to interrupt frequency hopping. Recommendations:...

Debian: Security Advisory (DLA-4144-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4126-2] jinja2 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4126-2 [email protected] https://www.debian.org/lts/security/ Lucas Kanashiro April 30, 2025 https://wiki.debian.org/LTS -...

CVE-2025-32974 org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type

XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.8 and from 16.0.0-rc-1 to before 16.2.0, the required rights analysis doesn't consider TextAreas with default content type. When editing a page, XWiki warns since version 15.9 when there is content on the page...

DLA-4147-1 fig2dev - security update

Bulletin has no description...

DLA-4144-1 qemu - security update

Bulletin has no description...

DLA-4148-1 vips - security update

Bulletin has no description...

XWiki Platform 安全漏洞

XWiki Platform is the XWiki open source suite of Wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform versions prior to 15.10.12, prior to 16.4.3, and prior to 16.8.0-rc-1, which stems from an improper check of the LESS compiler permissions...

Amazon Linux 2 : thunderbird (ALAS-2025-2840)

The version of thunderbird installed on the remote host is prior to 128.9.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2840 advisory. JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after- free. This...

DLA-4145-1 expat - security update

Bulletin has no description...

DLA-4146-1 libxml2 - security update

Bulletin has no description...

CVE-2025-21605 affecting package valkey for versions less than 8.0.3-1

CVE-2025-21605 affecting package valkey for versions less than 8.0.3-1. An upgraded version of the package is available that resolves this issue...

Debian: Security Advisory (DLA-4141-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...