CVE-2025-32906 affecting package libsoup for versions less than 3.0.4-3

CVE-2025-32906 affecting package libsoup for versions less than 3.0.4-3. A patched version of the package is available...

[SECURITY] Fedora 42 Update: rust-icu_collections-1.5.0-3.fc42

Collection of API for use in ICU libraries...

AZL-60550 CVE-2025-22872 affecting package prometheus-adapter for versions less than 0.12.0-3

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-65664 CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-3

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

Cisco Firepower Threat Defense Software Snort 3 Geolocation IP Filter Bypass (cisco-sa-ftdsnort3sip-bypass-LMz2ThKn)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by a vulnerability. - A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This vulnerability exists...

AZL-60547 CVE-2025-32911 affecting package libsoup for versions less than 3.0.4-3

A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server...

PT-2025-16346

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC version V3 1.0.15 Description A command injection issue was discovered via the groupname at the "/boafrm/formDiskCreateGroup" API endpoint. This allows for potential exploitation...

AZL-60389 CVE-2025-32913 affecting package libsoup for versions less than 3.0.4-3

A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function...

DLA-4124-1 twitter-bootstrap3 - security update

Bulletin has no description...

CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3

CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3. A patched version of the package is available...

Ubuntu: Security Advisory (USN-7346-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-256Q-HX8W-XCQX Silverstripe Framework user enumeration via timing attack on login and password reset forms

Impact User enumeration is possible by performing a timing attack on the login or password reset pages with user credentials. This was originally disclosed in https://www.silverstripe.org/download/security-releases/ss-2017-005/ for CMS 3 but was not patched in CMS 4+ References -...

AZL-59838 CVE-2025-32386 affecting package helm for versions less than 3.15.2-3

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling wh...

Ubuntu: Security Advisory (USN-7402-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-31127

creationtimestamp| type| source ---|---|--- 2025-04-03 21:55:39+00:00| seen| https://t.me/cvedetector/22006...

CVE-2025-30428

creationtimestamp| type| source ---|---|--- 2025-04-03 20:35:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10350...

CVE-2025-3140

creationtimestamp| type| source ---|---|--- 2025-04-03 09:22:52+00:00| seen| https://t.me/cvedetector/21948 2025-04-03 13:35:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10216...

CVE-2025-3139

creationtimestamp| type| source ---|---|--- 2025-04-03 06:52:18+00:00| seen| https://t.me/cvedetector/21938 2025-04-03 07:06:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvdotrrts2w 2025-04-03 13:35:04+00:00| published-proof-of-concept|...

CVE-2024-56528

This vulnerability affects Snowplow Collector 3.x before 3.3.0 unless it’s set up behind a reverse proxy that establishes payload limits. It involves sending very large payloads to the Collector and can render it unresponsive to the rest of the requests. As a result, data would not enter the...