27904 matches found
CVE-2025-66412
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting XSS vulnerability has been identified in the Angular Template Compiler. It occurs because the...
CVE-2025-58044 JumpServer has an Open Redirect Vulnerability
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This...
CVE-2025-55749 The XWiki Jetty package (XJetty) allows accessing any application file through URL
XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package XJetty, a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to Apache Lucene
Summary IBM webMethods BPM uses Apache Lucene in designer-process-feature and metadata-core-feature for text processing and filtering purpose. Vulnerability Details IBM X-Force ID: 216835 DESCRIPTION: Apache Lucene is vulnerable to a denial of service. By sending a specific regular expression...
USN-7900-1: CRaC JDK 17 vulnerabilities
Jinfeng Guo discovered that the Security component of CRaC JDK 17 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. CVE-2025-53057 Darius Bohni discovered that the JA...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.14 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.14 security, enhancement & bug fix update...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.16 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.16 security, enhancement & bug fix update...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.17 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.17 security, enhancement & bug fix update...
kernel security update
4.18.0-553.87.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
gimp:2.8 security update
gimp 2:2.8.22-26.3 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 2:2.8.22-26.2 - fix CVE-2025-5473 RHEL-95696 2:2.8.22-26.1 - fix CVE-2025-48797 RHEL-93503 - fix CVE-2025-48798 RHEL-93506...
OPENSUSE-SU-2025:15789-1 libecpg6-18.1-1.1 on GA media
These are all security issues fixed in the libecpg6-18.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15790-1 python-mistralclient-doc-6.1.0-1.1 on GA media
These are all security issues fixed in the python-mistralclient-doc-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Feb 2023)
This host is missing a critical security update according to Microsoft Office Click-to-Run update February 2023. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
OPENSUSE-SU-2025:15792-1 python39-3.9.24-2.1 on GA media
These are all security issues fixed in the python39-3.9.24-2.1 package on the GA media of openSUSE Tumbleweed...
kernel security update
5.14.0-611.11.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
OPENSUSE-SU-2025:15791-1 python315-3.15.0~a1-2.1 on GA media
These are all security issues fixed in the python315-3.15.0a1-2.1 package on the GA media of openSUSE Tumbleweed...
Security update for java-21-openjdk (important)
openSUSE security update: security update for java-21-openjdk ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20123-1 Rating: important References: bsc1246806 bsc1252414 bsc1252417 bsc1252418 Cross-References: CVE-2025-53057 CVE-2025-53066...
