117045 matches found
Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)
Summary DS8900F and DS8A00 updates have been released to remediate vulnerabilities in various components like IBM Java Quarterly Update, IBM WebSphere Application Server, IBM Power HMC, Linux Kernel, OpenSSL, libsoup, libssh, OpenSSH, net-snmp, Apache HTTP Server httpd, Expat libexpat, libpng,...
USN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8663-1: Linux kernel (NVIDIA) vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8661-1: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
ROOT-OS-DEBIAN-11-CVE-2025-5372 CVE-2025-5372 in libssh - Patched by Root
Root has patched CVE-2025-5372 in the libssh package for Root:Debian:11. Multiple fixed versions available...
CVE-2025-30156
creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26...
ROOT-APP-NPM-CVE-2025-32031 CVE-2025-32031 in @apollo/gateway - Patched by Root
Root has patched CVE-2025-32031 in the @apollo/gateway package for Root:npm. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-1180 CVE-2025-1180 in binutils - Patched by Root
Root has patched CVE-2025-1180 in the binutils package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2025-15689
creationtimestamp| type| source ---|---|--- 2026-08-20 13:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjcykghak2y 2026-08-20 14:07:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg74g3vc2e...
CVE-2025-15688
creationtimestamp| type| source ---|---|--- 2026-08-20 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjcyj5buc2y 2026-08-20 14:07:18+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg6twu2i2c...
ROOT-OS-DEBIAN-11-CVE-2025-68973 CVE-2025-68973 in gnupg2 - Patched by Root
Root has patched CVE-2025-68973 in the gnupg2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69223 CVE-2025-69223 in aiohttp - Patched by Root
Root has patched CVE-2025-69223 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69229 CVE-2025-69229 in aiohttp - Patched by Root
Root has patched CVE-2025-69229 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
CVE-2025-62307
HCL IntelliOps Event Management IEM is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing...
CVE-2025-53999
Unauthenticated Broken Access Control in Altair = 5.2.2 versions...
CVE-2025-15689
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
CVE-2025-15637
Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...
CVE-2025-62299
HCL IntelliOps Event Management (IEM) has a least-privilege violation allowing a privileged (PR:H) network attacker to access resources beyond their original privileges, with HIGH confidentiality impact. CVSS 6.6 MEDIUM; no exploitation details or fix version provided in the documents.
CVE-2025-53999
The WordPress Altair theme (versions up to 5.2.2) has an unauthenticated broken access control flaw (CVSS 6.5, medium), exploitable remotely without credentials. An attacker can alter or disrupt functionality (low integrity/availability impact) but cannot read sensitive data. No fix version or ex...
