30195 matches found
CVE-2024-45781 Grub2: fs/ufs: oob write in the heap
A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure...
CVE-2024-45780
A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap...
SUSE-SU-2025:0579-1 Security update for podman
This update for podman fixes the following issues: - CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. bsc1227052 - CVE-2023-45288: possible excessive CPU consumption due to no limit being set on the number of...
CVE-2024-13636
creationtimestamp| type| source ---|---|--- 2025-02-18 11:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53k7mgr2i 2025-02-18 12:11:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liha7hwyse2c 2025-02-18 12:38:10+00:00| seen|...
CVE-2025-1372
A flaw was found in GNU elfutils. This vulnerability allows buffer overflow, potentially leading to arbitrary code execution or crashes via manipulation of the 'z/x' argument in the dumpdatasection/printstringsection function of readelf.c. Mitigation Mitigation for this issue is either not...
CVE-2024-11895
The Online Payments – Get Paid with PayPal, Square & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.20.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...
Google Chrome < 133.0.6943.126 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 133.0.6943.126. It is, therefore, affected by multiple vulnerabilities as referenced in the 202502stable-channel-update-for-desktop18 advisory. - Use after free in Network in Google Chrome prior to 133.0.6943.126 allowe...
OPENSUSE-SU-2025:14816-1 kubernetes1.29-apiserver-1.29.14-1.1 on GA media
These are all security issues fixed in the kubernetes1.29-apiserver-1.29.14-1.1 package on the GA media of openSUSE Tumbleweed...
Google Chrome < 133.0.6943.126 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 133.0.6943.126. It is, therefore, affected by multiple vulnerabilities as referenced in the 202502stable-channel-update-for-desktop18 advisory. - Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed ...
AlmaLinux 8 : nodejs:22 (ALSA-2025:1611)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:1611 advisory. undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083 nodejs: GOAW...
CVE-2025-26466
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to ...
Huawei HarmonyOS interpreter string module out-of-bounds read vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the Huawei HarmonyOS interpreter string module, which can be exploited by an attacker to cause availability to ...
OPENSUSE-SU-2025:14819-1 kubernetes1.32-apiserver-1.32.2-1.1 on GA media
These are all security issues fixed in the kubernetes1.32-apiserver-1.32.2-1.1 package on the GA media of openSUSE Tumbleweed...
Mozilla Firefox < 135.0.1
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 135.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-12 advisory. - Memory safety bugs present in Firefox 135. Some of these bugs showed evidence of memory corruption and we presume...
OPENSUSE-SU-2025:14820-1 openssh-9.9p2-1.1 on GA media
These are all security issues fixed in the openssh-9.9p2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14818-1 kubernetes1.31-apiserver-1.31.6-1.1 on GA media
These are all security issues fixed in the kubernetes1.31-apiserver-1.31.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14817-1 kubernetes1.30-apiserver-1.30.10-1.1 on GA media
These are all security issues fixed in the kubernetes1.30-apiserver-1.30.10-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Symfony vulnerabilities (USN-7272-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7272-1 advisory. Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker could possibly use this...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Atril vulnerabilities (USN-7274-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7274-1 advisory. It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial o...