RHEL 6 / 7 : rh-java-common-apache-commons-collections (RHSA-2015:2523)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:2523 advisory. The Apache Commons Collections library provides new interfaces, implementations, and utilities to extend the features of the Java Collections...

RHEL 6 / 7 : mariadb55-mariadb (RHSA-2014:1862)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1862 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. This update fixes several...

RHEL 6 : openstack-nova (RHSA-2014:0366)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0366 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform...

RHEL 6 : python-django (RHSA-2016:2038)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2038 advisory. Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as...

RHEL 6 : python-keystoneclient (RHSA-2013:0944)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0944 advisory. Python-keystoneclient is the client library and command line utility for interacting with the OpenStack identity API. A flaw in Keystone allowed an...

RHEL 6 / 7 : mariadb55-mariadb (RHSA-2015:1647)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1647 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It was found that the MySQL client...

CVE-2025-30150 Shopware 6 allows attackers to check for registered accounts through the store-api

Shopware 6 is an open commerce platform based on Symfony Framework and Vue. Through the store-api it is possible as a attacker to check if a specific e-mail address has an account in the shop. Using the store-api endpoint /store-api/account/recovery-password you get the response, which indicates...

PT-2025-15422 · Shopware · Shopware 6

Name of the Vulnerable Software and Affected Versions: Shopware 6 versions prior to 6.6.10.3 Shopware 6 versions prior to 6.5.8.17 Description: The issue allows an attacker to determine if a specific email address has an account in the shop. This is achieved through the store-api endpoint...

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2025-3316

creationtimestamp| type| source ---|---|--- 2025-04-06 11:38:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10636 2025-04-06 14:00:22+00:00| published-proof-of-concept| Telegram/8B8LGzGKCOrPiM81l19X9UCUhr-br7bjFBDtFLZG9KwiE 2025-04-06 15:59:02+00:00| seen|...

CVE-2025-32370

creationtimestamp| type| source ---|---|--- 2025-04-06 07:38:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10632 2025-04-06 09:12:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm544lc5jd26 2025-04-06 10:00:59+00:00| published-proof-of-concept|...

AZL-59582 CVE-2025-29477 affecting package fluent-bit 3.0.6-6

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...

AZL-59530 CVE-2025-32052 affecting package libsoup for versions less than 3.0.4-6

A flaw was found in libsoup. A vulnerability in the sniffunknown function may lead to heap buffer over-read...

AZL-59541 CVE-2025-32051 affecting package libsoup for versions less than 3.4.4-6

A flaw was found in libsoup. The libsoup soupuridecodedatauri function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service DoS...

AZL-59551 CVE-2025-32050 affecting package libsoup for versions less than 3.0.4-6

A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read...

Logic Flaw Vulnerability in H3C Magic R3010 Gigabit Dual Band Wi-Fi 6 Router from Xinhua San Technology Co.

Xinhua San Technology Co., Ltd. is a global leader in digital solutions. A logic flaw vulnerability exists in the H3C Magic R3010 Gigabit Dual Band Wi-Fi 6 Router from Xinhua San Technologies Limited, which can be exploited by an attacker to gain control of the server...

Tenda RX3 SetPptpServerCfg Buffer Overflow Vulnerability

Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a SetPptpServerCfg buffer overflow vulnerability, which originates from the startIp and endIp parameters in...

AZL-58945 CVE-2025-2588 affecting package augeas for versions less than 1.12.0-6

A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function recaseexpand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been...

RHEL 6 / 7 : ruby193-ruby (RHSA-2014:1913)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1913 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 6 : cfme (RHSA-2014:1317)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1317 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...