30175 matches found
Gitlab -- Vulnerabilities
Gitlab reports: Denial of service via CI pipelines Unintentionally authorizing sensitive actions on users behalf IP Restriction Bypass through GraphQL Subscription Unauthorized users can list the number of confidential issues Debugging Information Disclosed...
webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack
A flaw was found in WebKitGTK. Loading a malicious iframe can cause a cross-site scripting attack due to permissions issues...
GHSA-RR8G-9FPQ-6WMG vulnerabilities
Vulnerabilities for packages: uv, berg, pgcat, zellij, cargo-audit, nushell, xh, samply, qdrant, mdbook, rustup, tealdeer, yazi, linkerd-network-validator, wadm, zola, pulumi-watch, zed, helix, sdp-k8s-injector, ntpd-rs, buck2, linkerd-await, topgrade, deno, sccache, oranda, atuin,...
2025-04 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5055526)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2025-04 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5055519)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-04 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5055526)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
CVE-2025-32028
HAX CMS PHP allows you to manage your microsite universe with PHP backend. Multiple file upload functions within the HAX CMS PHP application call a ’save’ function in ’HAXCMSFile.php’. This save function uses a denylist to block specific file types from being uploaded to the server. This list is...
Update 24.12 for Microsoft Dynamics 365 Business Central 2024 Release Wave 1 (Application Build 24.12.32447, Platform Build 24.0.32305)
None None...
Update 25.6 for Microsoft Dynamics 365 Business Central 2024 Release Wave 2 (Application Build 25.6.32556, Platform Build 25.2.32308)
None None...
Arguing Against CALEA
At a Congressional hearing earlier this week, Matt Blaze made the point that CALEA, the 1994 law that forces telecoms to make phone calls wiretappable, is outdated in today's threat environment and should be rethought: In other words, while the legally-mandated CALEA capability requirements have...
CVE-2025-22013
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with the way hyp code lazily saves the host's FPSIMD/SVE state, including: Host SVE being discarded unexpectedly due to inconsistent...
CVE-2025-22015 mm/migrate: fix shmem xarray update during migration
In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio-mapping should be NULL, and the folio is no longer...
CVE-2025-29478
A flaw was found in Fluent Bit's YAML configuration parser. This vulnerability allows attackers to cause a heap use-after-free, potentially leading to denial of service via a crafted YAML input file. Mitigation Mitigation for this issue is either not available or the currently available options d...
April 8, 2025—KB5055561 (Monthly Rollup)
None None...
April 8, 2025—KB5055557 (Monthly Rollup)
None None...
April 8, 2025—KB5055609 (Monthly Rollup)
None None...
April 8, 2025—KB5055526 (OS Build 20348.3453)
None None...
April 8, 2025—KB5055518 (OS Builds 19044.5737 and 19045.5737) - EXPIRED
None None...