CVE-2025-30415

Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40077, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

Minor update(2) for Vivaldi Android Browser 7.4

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the first 7.4 stable, minor update: Settings Enable...

PT-2025-54834

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions prior to build 41800 Acronis Cyber Protect 16 versions prior to build 39938 Description A flaw exists that allows for sensitive data disclosure and manipulation due to missing authorization checks...

PT-2025-54831

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent versions prior to build 39870 Acronis Cyber Protect 16 versions prior to build 39938 Acronis Cyber Protect 15 versions prior to build 41800 Description The software suffers from a flaw allowing sensitive data...

PT-2025-54832

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions prior to build 41800 Acronis Cyber Protect 16 versions prior to build 39938 Description The software suffers from a flaw related to improper authentication, which can lead to sensitive data disclosure and...

PT-2025-54833

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions prior to build 41800 Acronis Cyber Protect 16 versions prior to build 39938 Description The software suffers from a flaw related to improper authentication, which can lead to sensitive data disclosure and...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.20.1 release

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

NuCom NC-WR744G security vulnerability

NuCom NC-WR744G is a wireless router from NuCom. A security vulnerability exists in NuCom NC-WR744G version 8.5.5 Build 20200530.307, which originates from the presence of hard-coded credentials in parameter CMCCAdmin/useradmin/CUAdmin...

SUSE-SU-2025:01778-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: Update to 12.5.2: Security fixes: - CVE-2025-22247: Fixed Insecure file handling bsc1243106 Other fixes: - Fixed GCC 15 compile time error bsc1241938 - Fixed building with containerd 1.7.25+ bsc1237147 Full changelog:...

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: Update to 12.5.2: Security fixes: CVE-2025-22247: Fixed Insecure file handling bsc1243106 Other fixes: Fixed GCC 15 compile time error bsc1241938 Fixed building with containerd 1.7.25+ bsc1237147 Full changelog:...

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: Update to 12.5.2: Security fixes: CVE-2025-22247: Fixed Insecure file handling bsc1243106 Other fixes: Fixed GCC 15 compile time error bsc1241938 Fix building with containerd 1.7.25+ bsc1237147 Full changelog:...

multicast in source builds from vulnerable setuptools dependency

Impact Some source-builds may be impacted by a CWE-1395 eg. vulnerable setuptools dependency. Multicast prior to v2.0.9a3 on systems with minimal dependancies installed may use setuptools =80.4 Pre-release version v2.0.9a3 and later are recommended for improved stability over v2.0.9a0 Workarounds...

GHSA-94V7-WXJ6-R2Q5 multicast in source builds from vulnerable setuptools dependency

Impact Some source-builds may be impacted by a CWE-1395 eg. vulnerable setuptools dependency. Multicast prior to v2.0.9a3 on systems with minimal dependancies installed may use setuptools =80.4 Pre-release version v2.0.9a3 and later are recommended for improved stability over v2.0.9a0 Workarounds...

Exploit for Argument Injection in Flatpak

CVE-2024-32462 CVE-2024-32462 code exec sbx escape How the di...

Schneider Electric EcoStruxure Power Build Rapsody Stack Buffer Overflow Vulnerability

Schneider Electric EcoStruxure Power Build Rapsody is a power monitoring platform from Schneider Electric France. Schneider Electric EcoStruxure Power Build Rapsody suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to achieve arbitrary code execution on an...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the qedebuildskb function in the drivers/net/ethernet/qlogic/qede/qedefp.c module of the Linux kernel is related to incorrect error handling. Exploiting this vulnerability could allow an attacker to cause a service failure...

Fedora: Security Advisory (FEDORA-2024-256818da09)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-22731

Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Build Private Store For Woocommerce build-private-store-for-woocommerce allows Cross Site Request Forgery.This issue affects Build Private Store For Woocommerce: from n/a through = 1.0...

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-52582

Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build process network-isolated. Prior to version 0.14.0, secrets may be shown in logs when an unhandled exception is triggered because the tool is logging locals of each function. This...