30175 matches found
CVE-2025-46489
CVE-2025-46489 affects the WordPress plugin Bulk Assign Linked Products For WooCommerce (versions ≤ 2.1). Root cause: Missing Authorization, enabling access to functionality not properly constrained by ACLs. CVSS v3.1 base score 5.3 (Medium); impact is limited to confidentiality? None, integrity/...
USN-7462-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...
USN-7461-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...
USN-7460-1: Linux kernel (Azure FIPS) vulnerabilities
Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...
The Landmines CAASM Exposes That Your CMDB Pretends Don’t Exist
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Let’s be honest: a lot of the...
USN-7455-2: Linux kernel (FIPS) vulnerabilities
Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...
CVE-2018-7842
creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-01...
CVE-2025-0639
An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...
CVE-2025-1908
An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...
Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7460-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7460-1 advisory. Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacke...
c-ares 1.32.3 < 1.34.5 Use After Free (macOS)
The version of c-ares installed on the remote host is affected by a use after free vulnerability. c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in readanswers when processanswer may re-enqueue a query either due to a DNS Cookie Failure or when t...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7462-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7462-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
Debian dla-4136 : openrazer-daemon - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4136 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4136-1 [email protected]...
OPENSUSE-SU-2025:15025-1 libraw-devel-0.21.4-1.1 on GA media
These are all security issues fixed in the libraw-devel-0.21.4-1.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 9 : thunderbird (ELSA-2025-4169)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-4169 advisory. 128.9.0-2.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.9.0 - Add OpenELA debranding 128.9.0-2 - Update to 128.9.0 build3 128.9.0...
OPENSUSE-SU-2025:15022-1 java-11-openjdk-11.0.27.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.27.0-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-7459-1)
"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7459-1 advisory. Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attack...
OPENSUSE-SU-2025:15023-1 java-17-openjdk-17.0.15.0-1.1 on GA media
These are all security issues fixed in the java-17-openjdk-17.0.15.0-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu 20.04 LTS : Linux kernel (IBM) vulnerabilities (USN-7458-1)
"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7458-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...