10331 matches found
OESA-2025-1360 ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of...
CVE-2025-30469
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen...
CVE-2025-30204 affecting package kubernetes for versions less than 1.30.10-4
CVE-2025-30204 affecting package kubernetes for versions less than 1.30.10-4. A patched version of the package is available...
Amazon Linux 2 : jsoup (ALAS-2025-2813)
The version of jsoup installed on the remote host is prior to 1.16.1-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2813 advisory. jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be...
CVE-2025-30456
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...
CVE-2025-24180
The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix...
CVE-2025-24097
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata...
CVE-2025-30435
Summary (CVE-2025-30435) : macOS Sequoia 15.4 resolves a logging-related vulnerability that could allow a sandboxed app to access sensitive user data in system logs. The issue stems from insufficient data redaction, addressed by improved redaction in the security content for macOS Sequoia 15.4. A...
CVE-2025-27144 affecting package skopeo for versions less than 1.14.4-4
CVE-2025-27144 affecting package skopeo for versions less than 1.14.4-4. A patched version of the package is available...
CVE-2024-11499
A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered if certificates are updated while in use on active connections. The affected CMU will automatically...
SUSE CVE-2025-27834
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdffunc.c...
CVE-2025-27834
A flaw was found in Artifex Ghostscript. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdffunc.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease ...
CVE-2025-27834
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdffunc.c...
CVE-2025-27834
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdffunc.c...
AZL-66686 CVE-2022-1804 affecting package accountsservice 0.6.55-4
accountsservice no longer drops permissions when writting .pamenvironment...
Malicious code in patternfly-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2fd8e936317fc9125f41ad0600e981e709900ce289e48fcd9e323d3a062247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2697 Malicious code in patternfly-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2fd8e936317fc9125f41ad0600e981e709900ce289e48fcd9e323d3a062247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Artifex Ghostscript 安全漏洞
Artifex Ghostscript is a set of free software compiled by Artifex, Inc. based on Adobe, PostScript, and the Page Description Language for Portable Document Formatting PDL. A security vulnerability exists in Artifex Ghostscript versions prior to 10.05.0, which is caused by an oversized Type 4...
CVE-2025-27834
CVE-2025-27834 affects Artifex Ghostscript prior to 10.05.0. The issue is a buffer overflow triggered by an oversized Type 4 function in a PDF, specifically in pdf/pdf_func.c. Connected sources corroborate the affected component and the root cause (buffer overflow when processing large Type 4 fun...
