CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

chromedriver-135.0.7049.95-1.1 on GA media (moderate)

chromedriver-135.0.7049.95-1.1 on GA media Announcement ID: openSUSE-SU-2025:15027-1 Rating: moderate Cross-References: CVE-2025-3619 CVE-2025-3620 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed...

OPENSUSE-SU-2025:15033-1 govulncheck-vulndb-0.0.20250424T181457-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250424T181457-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15035-1 valkey-8.0.3-1.1 on GA media

These are all security issues fixed in the valkey-8.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15034-1 subfinder-2.7.0-3.1 on GA media

These are all security issues fixed in the subfinder-2.7.0-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-24583

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through = 3.16.5...

CVE-2025-2613

The Login Manager – Design Login Page, View Login Activity, Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom logo and background URLs in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes...

CVE-2025-3637

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq75qqeu2s 2025-04-25 19:11:25+00:00| seen| https://t.me/cvedetector/23777...

CLSA-2025-1745588191 java-1.8.0-openjdk: Fix of 3 CVEs

Upgrade to shenandoah-jdk8u452-b09 fixing the following CVEs: - CVE-2025-21587: better TLS connection support - CVE-2025-30691: improve compiler transformations - CVE-2025-30698: enhance Buffered Image handling...

PT-2025-18943

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the vmxnet3 driver's XDP handling, which is buggy for packet sizes between 128 and 3k bytes. This bug can cause MTU-related connectivity issues, and in some cases, it...

OPENSUSE-SU-2025:15027-1 chromedriver-135.0.7049.95-1.1 on GA media

These are all security issues fixed in the chromedriver-135.0.7049.95-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15031-1 python311-grpcio-1.69.0-2.1 on GA media

These are all security issues fixed in the python311-grpcio-1.69.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15030-1 opentofu-1.9.1-1.1 on GA media

These are all security issues fixed in the opentofu-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...

Tenable Nessus < 10.8.4 Multiple Vulnerabilities (TNS-2025-05)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.8.4. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2025-05 advisory. - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference ...

Ubuntu: Security Advisory (USN-7461-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15032-1 python311-h11-0.16.0-1.1 on GA media

These are all security issues fixed in the python311-h11-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15029-1 kyverno-1.14.0-1.1 on GA media

These are all security issues fixed in the kyverno-1.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7462-2: Linux kernel (AWS FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...

CVE-2025-46489

CVE-2025-46489 affects the WordPress plugin Bulk Assign Linked Products For WooCommerce (versions ≤ 2.1). Root cause: Missing Authorization, enabling access to functionality not properly constrained by ACLs. CVSS v3.1 base score 5.3 (Medium); impact is limited to confidentiality? None, integrity/...

USN-7462-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...