1305 matches found
SUSE SLES12 Security Update : docker-stable (SUSE-SU-2025:03540-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03540-1 advisory. - Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary...
SUSE-SU-2025:03540-1 Security update for docker-stable
This update for docker-stable fixes the following issues: - Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary information, but our CVE tracking tools do not understand how the package is forked and so it see...
EUVD-2018-17504
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414593)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414593 advisory. The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to...
EUVD-2025-29579
Malicious code in bioql PyPI...
EUVD-2025-26212
Malicious code in bioql PyPI...
EUVD-2023-36879
Malicious code in bioql PyPI...
EUVD-2022-55193
Malicious code in bioql PyPI...
EUVD-2022-55139
Malicious code in bioql PyPI...
GHSA-M8RJ-PPPH-MJ33 @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user
Impact When visiting a specific URL, an anonymous user could cause the NodeJS server part of Volto to quit with an error. Patches The problem has been patched and the patch has been backported to Volto major versions down until 16. It is advised to upgrade to the latest patch release of your...
[SECURITY] [DLA 4262-2] libcommons-lang-java regression update
Debian LTS Advisory DLA-4262-2 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 30, 2025 https://wiki.debian.org/LTS Package : libcommons-lang-java Version : 2.6-9+deb11u2 CVE ID : CVE-2025-48924 A regression has been discovered in the latest release...
CVE-2025-11153
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3...
CVE-2025-11152
Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3...
SUSE CVE-2025-39835
In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may...
CVE-2025-39835
In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may...
AZL-74736 CVE-2025-39835 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may...
UBUNTU-CVE-2025-39835
In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may...
CVE-2025-10533
Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...