32079 matches found
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.29+7 October 2025 CPU: CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data bsc1252414. CVE-2025-53066: Fixed unauthenticated...
Oracle Linux 7 : linux-firmware (ELSA-2025-25742)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25742 advisory. 20251030-999.44.1.gite9292517.el7 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...
SUSE-SU-2025:3943-1 Security update for qatengine, qatlib
This update for qatengine, qatlib fixes the following issues: Note that the 1.6.1 release included in 1.7.0 fixes the following vulnerabilities: bsc1233363 CVE-2024-28885 bsc1233365 CVE-2024-31074 bsc1233366 CVE-2024-33617 Update to 1.7.0: ipp-crypto name change to cryptography-primitives QATSW G...
Veeam Backup & Replication 13: Changes to Supported Linux Platforms
Article Applicability This article lists the specific Linux distributions and versions that will no longer be supported starting with Veeam Backup & Replication and Veeam Agent for Linux version 13. These lists are intended for customers currently running Veeam Backup & Replication 12.3 and Veeam...
Oracle Linux 7 : compat-libtiff3 (ELSA-2025-17710)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-17710 advisory. 3.9.4-12.0.1 - Fixes CVE-2025-9900 buffer underflow Orabug: 38523840 Tenable has extracted the preceding description block directly from the Oracle Linux...
Important: Red Hat Security Advisory: squid security update
An update for squid is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
StarCharge Artemis AC Charger 安全漏洞
StarCharge Artemis AC Charger is an AC charger from StarCharge Singapore. A security vulnerability exists in the StarCharge Artemis AC Charger version 7-22 kW 1.0.4, which stems from the use of a hard-coded AES key, which could allow an attacker to forge or decrypt a valid login token...
CVE-2025-9562
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qsdate shortcode in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress Redirection for Contact Form 7 plugin <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via qsdate Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Redirection for Contact Form 7 versions = 3.2.6...
Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass Vulnerability
Rockwell Automation PanelView Plus 7 Performance Series B is a versatile HMI application from Rockwell Automation. An authentication bypass vulnerability exists in Rockwell Automation PanelView Plus 7 Performance Series B, which can be exploited by an attacker to cause unauthorized access,...
Oracle Linux 7 : httpd (ELSA-2025-14997)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14997 advisory. 2.4.6-99.0.7.1 - Fixed security update CVE-2024-47252 CVE-2025-49812 Orabug: 38378160 Tenable has extracted the preceding description block directly...
CVE-2025-9063
CVE-2025-9063 concerns an authentication bypass in the FactoryTalk View Machine Edition Web Browser ActiveX control, enabling an unauthenticated attacker on the same network to gain access to the PanelView Plus 7 Series B file system, diagnostic information, and event logs. Connected sources conf...
[SECURITY] [DLA 4330-1] ghostscript security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4330-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 14, 2025 https://wiki.debian.org/LTS -...
CVE-2025-9551
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5...
Oracle Linux 7 : udisks2 (ELSA-2025-16130)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-16130 advisory. 2.8.4-1.0.1 - Fix index underflow in LoopSetup CVE-2025-8067 Orabug: 38444282 Tenable has extracted the preceding description block directly from the Oracle...
A Bootiful Podcast: Spring Security contributor Josh Cummings on the latest-and-greatest in Spring Security 7
Hi, Spring fans! In this installment we talk to Spring Security contributor and legend Josh Cummings...
GHSA-378F-8Q54-3FQX Liferay Portal is vulnerable to Stored XSS through Forms text type field
Stored cross-site scripting XSS vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and 7.3 GA through update 35 allows remote attackers to inject arbitrary web script or HTML via a...
CVE-2025-11356
creationtimestamp| type| source ---|---|--- 2025-10-07 07:33:13+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2lmeckcil26 2025-10-07 13:48:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333195472561898...
