BIT-JOOMLA-2021-23130 [20210304] - Core - XSS within the feed parser library

An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of feed fields could lead to xss issues...

USN-7413-1: Linux kernel (IoT) vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

CVE-2024-53868

A flaw was found in Apache Traffic Server. This vulnerability allows request smuggling via chunked messages, potentially leading to security bypass. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as...

CVE-2025-22005

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw. fibchecknhv6gw expects that fib6nhinit cleans up everything when it fails. Commit 7dd73168e273 "ipv6: Always allocate pcpu memory in a fib6nh" moved fibnhcommoninit before...

CVE-2025-30218

A flaw was found in the Next.js package. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id, which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js application...

GHSA-JF85-CPCP-J695

creationtimestamp| type| source ---|---|--- 2025-04-03 02:06:20+00:00| seen| https://gist.github.com/shmil111/0a44cfb066f7a8de2e03f671c12f585f 2025-04-03 05:09:00+00:00| seen| https://gist.github.com/shmil111/fb79705b111af53d22c7d3bdcbd34051...

GHSA-X5RQ-J2XG-H7QM

creationtimestamp| type| source ---|---|--- 2025-04-03 02:06:20+00:00| seen| https://gist.github.com/shmil111/0a44cfb066f7a8de2e03f671c12f585f 2025-04-03 05:09:00+00:00| seen| https://gist.github.com/shmil111/fb79705b111af53d22c7d3bdcbd34051...

PT-2025-22639 · Opensuse · Gsl

These are all security issues fixed in the gsl-2.8-4.1 package on the GA media of openSUSE Tumbleweed...

Fedora 40 : suricata (2025-2a295896e6)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2a295896e6 advisory. This is an extra release to address a critical issue in 7.0.9 affecting AFPACKET users: setting a BPF would cause Suricata to fail to start up. This...

Moodle Permission Issues Vulnerability

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. A vulnerability exists in Moodle for privilege issues. The vulnerability stems from insufficient permission checking that allo...

OPENSUSE-SU-2025:14962-1 go1.23-1.23.8-1.1 on GA media

These are all security issues fixed in the go1.23-1.23.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14964-1 gsl-2.8-4.1 on GA media

These are all security issues fixed in the gsl-2.8-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-14732 · Unknown · Think201 Clients

Name of the Vulnerable Software and Affected Versions: Think201 Clients versions 1.1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Think201 Clients...

OPENSUSE-SU-2025:14965-1 python311-ecdsa-0.19.1-1.1 on GA media

These are all security issues fixed in the python311-ecdsa-0.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14961-1 firefox-esr-128.9.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-22238

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, specifically the scsi: ufs: exynos component. It has been resolved by disabling iocc if the dma-coherent property isn't set. Without this fix, UFS ca...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : GnuPG vulnerability (USN-7412-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7412-1 advisory. It was discovered that GnuPG incorrectly handled importing keys with certain crafted subkey data. If a user or automated system we...

OPENSUSE-SU-2025:14963-1 go1.24-1.24.2-1.1 on GA media

These are all security issues fixed in the go1.24-1.24.2-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu: Security Advisory (USN-7407-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...