SUSE-SU-2025:20217-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: Update to version 2.42.12: + Fix a build failure, + Fix occasional build failures, + ani: Reject files with multiple INA or IART chunks, + ani: Reject files with multiple anih chunks CVE-2022-48622 bsc1219276, + ani: validate chunk size, +...

CVE-2025-21453

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur...

CVE-2025-21453

CVE-2025-21453 describes memory corruption in Qualcomm components due to a use-after-free style issue when an iterator is accessed after removal, with the GPS HLOS driver specifically listed in CVE records. Public records (NVD/NCSC/Red Hat CVEs) corroborate the memory-corruption description and t...

Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issues: CVE-2025-30219: Fixed XSS in an error message in Management UI bsc1240071 Other fixes: - Disable parallel make, this causes build failures Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

The vulnerability of the Apache James deployment and corporate email management software lies in its insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Apache James software for deploying and managing corporate email is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the microprogramming software of the Uniswap Universal Router, which allows a hacker to cause a service failure.

The vulnerability of the Uniswap Universal Router’s microprogramming software is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

GNU PSPP 安全漏洞

GNU PSPP is an application for data sampling, statistics and analysis. A denial of service vulnerability exists in GNU PSPP, which can be exploited by an attacker to cause assertion failures and application exits...

WordPress Job Listings plugin 0.1-0.1.1 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin Job Listings versions 0.1-0.1.1...

Vulnerability of the init_dell_smbios_wmi() function in the drivers/platform/x86/dell-smbios-wmi.c module – This driver provides support for X86 device controllers in the Linux operating system, allowing an attacker to cause a service failure.

Vulnerability of the initdellsmbioswmi function in the drivers/platform/x86/dell-smbios-wmi.c module – The Linux X86 kernel device support drivers are vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the get_ccwgroupdev_by_busid() function in the arch/s390/include/asm/ccwgroup.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the getccwgroupdevbybusid function in the arch/s390/include/asm/ccwgroup.h module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Vulnerability of the do_read() function in the drivers/infiniband/sw/rxe/rxe_comp.c module – The Linux kernel’s InfiniBand support driver allows a hacker to cause a service failure.

Vulnerability of the doread function in the drivers/infiniband/sw/rxe/rxecomp.c module – The Linux kernel’s InfiniBand support driver has a vulnerability related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

WordPress Page View Count plugin 2.8.0-2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

Missing Authorization to Authenticated Subscriber+ Limited Options Update vulnerability discovered by kr0d in WordPress Plugin Page View Count versions 2.8.0-2.8.4...

The vulnerabilities of the bpf and sockmap components in Linux kernel allow attackers to induce service failures.

The vulnerability of the bpf and sockmap components in Linux operating systems is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the SIP processing subsystem of the Cisco BroadWorks platform allows a attacker to trigger a service failure.

The vulnerability of the SIP processing subsystem in Cisco BroadWorks collaboration platforms is related to uncontrolled memory consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause service interruptions.

Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the data transmission function in the Nearby Share data sharing tool between Google Quick Share devices allows a perpetrator to cause a service failure.

The vulnerability of the Nearby Share data transfer function in the Google Quick Share data sharing tool is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the NVIDIA Riva multilingual speech processing and translation tools is related to access control deficiencies, which allow attackers to escalate their privileges, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the NVIDIA Riva multilingual speech processing and translation tools is related to deficiencies in access control. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges, gain unauthorized access to protected information, or cause service...

The vulnerability of the NVIDIA Riva multilingual speech processing and translation tools is related to access control deficiencies, which allow attackers to trigger service failures.

The vulnerability of the NVIDIA Riva multilingual speech processing and translation tools is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures...

New whitepaper outlines the taxonomy of failure modes in AI agents

We are releasing a taxonomy of failure modes in AI agents to help security professionals and machine learning engineers think through how AI systems can fail and design them with safety and security in mind. The taxonomy continues Microsoft AI Red Team's work to lead the creation of systematizati...