GLSA-202507-09 : Git: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202507-09 Git: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

Git: Multiple Vulnerabilities

Background Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Description Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details...

REXML: Multiple Vulnerabilities

Background REXML is an XML toolkit for Ruby. Description Multiple vulnerabilities have been discovered in REXML. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time...

GLSA-202507-07 : Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202507-07 Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details...

CampCodes Payroll Management System 安全漏洞

CampCodes Payroll Management System is a payroll management system from CampCodes Philippines. A security vulnerability exists in CampCodes Payroll Management System version 1.0, which stems from improper handling of parameter IDs in the file /ajax.php, which could lead to a SQL injection attack...

The vulnerability of the channel.c component in the Linux operating system’s kernel allows a hacker to gain access to confidential data.

The vulnerability of the channel.c component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to access confidential data...

The vulnerability in the net/xdp/xsk.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/xdp/xsk.c component of the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu: Security Advisory (USN-7605-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 9 : xorg-x11-server-Xwayland (RHSA-2025:10347)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10347 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server-Xwayland: xorg-x11-server: tigervnc:...

RHSA-2024:1785

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:03+00:00| seen| Telegram/WfJc7uPRoLJrV4N04ab0I6vzm3GHF9Cjyp48UCO6YlWFjs 2025-07-05 03:15:05+00:00| seen| Telegram/RHkgF7skTMhGpb13BzAtFn3sG2C9DjYxigsVldo5V7Ki1OA 2025-07-05 03:15:05+00:00| seen|...

RHSA-2024:2037

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:03+00:00| seen| Telegram/WfJc7uPRoLJrV4N04ab0I6vzm3GHF9Cjyp48UCO6YlWFjs 2025-07-05 03:15:05+00:00| seen| Telegram/548N1UnvXTF033J6UsfEWIRK9dcF16GDTT6PJCyjW3XPWc 2025-07-05 03:15:05+00:00| seen|...

RHSA-2024:2616

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:03+00:00| seen| Telegram/WfJc7uPRoLJrV4N04ab0I6vzm3GHF9Cjyp48UCO6YlWFjs 2025-07-05 03:15:05+00:00| seen| Telegram/RHkgF7skTMhGpb13BzAtFn3sG2C9DjYxigsVldo5V7Ki1OA 2025-07-05 03:15:05+00:00| seen|...

assimp-devel-6.0.2-1.1 on GA media (moderate)

assimp-devel-6.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15209-1 Rating: moderate Cross-References: CVE-2025-2750 CVE-2025-2751 CVE-2025-2757 CVE-2025-3158 CVE-2025-3548 CVSS scores: CVE-2025-3158 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-3158 SUSE : 4.8...

python312-3.12.11-2.1 on GA media (moderate)

python312-3.12.11-2.1 on GA media Announcement ID: openSUSE-SU-2025:15287-1 Rating: moderate Cross-References: CVE-2024-12718 CVE-2025-4330 CVE-2025-4517 CVSS scores: CVE-2024-12718 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2025-4330 SUSE : 8.2...

govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media Announcement ID: openSUSE-SU-2025:15225-1 Rating: moderate Cross-References: CVE-2020-36846 CVE-2022-31022 CVE-2023-42818 CVE-2025-0913 CVE-2025-1792 CVE-2025-22874 CVE-2025-25207 CVE-2025-25208 CVE-2025-2571 CVE-2025-29785 CVE-2025-3230...

SUSE CVE-2025-3913

Mattermost versions 10.7.x = 10.7.0, 10.6.x = 10.6.2, 10.5.x = 10.5.3, 9.11.x = 9.11.12 fail to properly validate permissions when changing team privacy settings, allowing team administrators without the 'invite user' permission to access and modify team invite IDs via the...

The vulnerability of the mtk-cmdq component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mtk-cmdq component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Debian: Security Advisory (DSA-5957-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the flow_dissector component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the flowdissector component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the net/mlx5e component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the net/mlx5e component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...