13255 matches found
UBUNTU-CVE-2025-1017
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firef...
CVE-2024-43802 affecting package vim for versions less than 9.1.0697-1
CVE-2024-43802 affecting package vim for versions less than 9.1.0697-1. A patched version of the package is available...
CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6
CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6. A patched version of the package is available...
CVE-2022-39382
Keystone is a headless CMS for Node.js — built with GraphQL and React.@keystone-6/[email protected] || 3.0.1 users that use NODEENV to trigger security-sensitive functionality in their production builds are vulnerable to NODEENV being inlined to "development" for user code, irrespective of what your...
CVE-2022-39322
@keystone-6/core is a core package for Keystone 6, a content management system for Node.js. Starting with version 2.2.0 and prior to version 2.3.1, users who expected their multiselect fields to use the field-level access control - if configured - are vulnerable to their field-level access contro...
AZL-56478 CVE-2025-0167 affecting package curl for versions less than 8.8.0-6
When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare...
Security update for libxml2
This update for libxml2 fixes the following issues: CVE-2024-34459: Fixed buffer over-read in bsc1224282 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...
RHEL 6 : rsync (RHSA-2025:0849)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0849 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...
python-jinja2 security update
2.10.1-6 - Security fix for CVE-2024-56326 Resolves: RHEL-74677...
RHEL 8 : redis:6 (RHSA-2025:0689)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0689 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...
RHEL 8 : redis:6 (RHSA-2025:0640)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0640 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...
CVE-2024-31903
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data...
PT-2025-1391 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6
Name of the Vulnerable Software and Affected Versions: Mercedes Benz head-unit NTG 6 affected versions not specified Description: The Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing, it is possible to trigger a crash of the service...
CVE-2025-21176
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...
CVE-2025-21173
.NET Elevation of Privilege Vulnerability...
CVE-2025-21172
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2022-2929 affecting package dhcp 4.4.3-3
CVE-2022-2929 affecting package dhcp 4.4.3-3. This CVE either no longer is or was never applicable...
CVE-2023-0286 affecting package reaper 3.1.1-6
CVE-2023-0286 affecting package reaper 3.1.1-6. This CVE either no longer is or was never applicable...