Advisory ROSA-SA-2025-2632

software: yt-dlp 2023.07.06 WASP: ROSA-CHROME packageevrstring: yt-dlp-2023.07.06-2 CVE-ID: CVE-2023-40581 BDU-ID: 2023-06330 CVE-Crit: HIGH CVE-DESC.: A vulnerability exists in the yt-dlp audio and video download utility due to failure to take measures to neutralize special elements. Exploitatio...

CVE-2017-13317

In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

Advisory ROSA-SA-2025-2616

software: opusfile 0.12 WASP: ROSA-CHROME packageevrstring: opusfile-0.12-3 CVE-ID: CVE-2022-47021 BDU-ID: 2023-00624 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the opgetdata and opopen1 opusfile.c functions in the xiph of the opusfile stream decoder library is related to null pointer...

CVE-2024-45341

CVE-2024-45341 affects Go (golang) components handling X.509 URI name constraints. A certificate URI containing an IPv6 address with a zone ID may incorrectly satisfy the certificate-chain URI constraint, potentially weakening PKI checks in private PKIs that use URIs. The issue is fixed in variou...

CVE-2025-24124

creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxtmyoz72r 2025-01-28 18:48:58+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113907475072892051 2025-03-18 04:00:00+00:00| seen|...

CVE-2025-24115

creationtimestamp| type| source ---|---|--- 2025-01-27 22:17:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxsyo4s52f...

CVE-2025-24159

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-56967

creationtimestamp| type| source ---|---|--- 2025-01-27 19:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnorfi7p27 2025-01-27 19:49:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113902050914402952 2025-01-27 21:52:14+00:00| seen|...

CVE-2025-23982

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabmvqz22w...

Advisory ROSA-SA-2025-2599

software: binutils 2.38 WASP: ROSA-CHROME packageevrstring: binutils-2.38-5 CVE-ID: CVE-2022-35205 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in Binutils allows attackers to perform a denial of service via displaydebugnames. CVE-STATUS: The vulnerability has been resolved CVE-REV: T...

Advisory ROSA-SA-2025-2596

software: procps-ng 3.3.17 OS: ROSA-CHROME packageevrstring: procps-ng-3.3.17-4 CVE-ID: CVE-2023-4016 BDU-ID: 2023-07117 CVE-Crit: LOW CVE-DESC.: A vulnerability in the running processes information collection utility ps of the procps-ng command line utility set is related to an operation exceedi...

Advisory ROSA-SA-2025-2591

software: postfix 3.5.25 OS: ROSA-CHROME packageevrstring: postfix-3.5.25-1 CVE-ID: CVE-2023-51764 BDU-ID: 2024-00106 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the smtpd daemon of the Postfix mail server is related to insufficient data authentication when processing string endings other tha...

Advisory ROSA-SA-2025-2582

software: libtiff 4.1.0 OS: ROSA-CHROME packageevrstring: libtiff-4.1.0-8 CVE-ID: CVE-2024-7006 BDU-ID: 2024-06610 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the LibTIFF library involves null pointer dereferencing via tifdirinfo.c. Exploitation of the vulnerability could allow an attacker...

Advisory ROSA-SA-2025-2577

Software: wpasupplicant 2.11 WASP: ROSA-CHROME packageevrstring: wpasupplicant-2.11-3 CVE-ID: CVE-2023-52160 BDU-ID: 2024-01426 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Protected Extensible Authentication Protocol PEAP implementation of the Wi-Fi WPA Supplicant secure access client is...

Advisory ROSA-SA-2025-2570

software: php 7.4.33 WASP: ROSA-CHROME packageevrstring: php-7.4.33-11 CVE-ID: CVE-2022-4900 BDU-ID: 2023-02666 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the phpcliserverstartupworkers sapi/cli/phpcliserver.c function of the PHP programming language interpreter is related to an operation...

About the security content of macOS Sequoia 15.3

About the security content of macOS Sequoia 15.3 This document describes the security content of macOS Sequoia 15.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

Debian dsa-5850 : git - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5850 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5850-1 [email protected] https://www.debian.org/securit...

CVE-2024-12076

creationtimestamp| type| source ---|---|--- 2025-01-25 07:28:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113887813133186587 2025-01-25 08:05:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3067 2025-01-25 10:28:58+00:00| seen|...

CVE-2025-22606

creationtimestamp| type| source ---|---|--- 2025-01-24 16:04:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2926 2025-01-24 17:45:11+00:00| seen| https://t.me/cvedetector/16294...

CVE-2024-55929

creationtimestamp| type| source ---|---|--- 2025-01-23 17:36:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113878878534131537 2025-01-23 18:03:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2787 2025-01-23 18:16:00+00:00| seen|...