13188 matches found
Important: Red Hat Security Advisory: podman security update
An update for podman is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
SUSE-SU-2025:20731-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RTUpdate9 fixes the following issues: - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow bsc1245685 - CVE-2025-38181: calipso: fix null-ptr-deref in calipsoreqset,delattr bsc1246001 - CVE-2025-38498: dochangetype: refuse to operate on...
SUSE-SU-2025:20790-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RTUpdate9 fixes the following issues: - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow bsc1245685 - CVE-2025-38181: calipso: fix null-ptr-deref in calipsoreqset,delattr bsc1246001 - CVE-2025-38498: dochangetype: refuse to operate on...
Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak.
Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...
PT-2025-39457
Name of the Vulnerable Software and Affected Versions Dell PowerEdge Server BIOS and Dell iDRAC9 affected versions not specified Description A high privileged attacker with remote access could potentially exploit an Information Disclosure issue. This could lead to the disclosure of information...
RHEL 9 : ncurses (RHSA-2025:16418)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16418 advisory. The ncurses new curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses...
RHEL 9 : Red Hat Product OCP Tools 4.18 Openshift Jenkins (RHSA-2025:16455)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16455 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron...
PT-2025-39205
Name of the Vulnerable Software and Affected Versions Tenda AC9 version 1.0 Description A buffer overflow issue exists in Tenda AC9 version 1.0. The issue is related to the handling of the sys.vendor configuration value provided by the user. Recommendations At the moment, there is no information...
Oracle Linux 9 : mysql (ELSA-2025-16086)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-16086 advisory. 8.0.43-1 - Rebase to MySQL 8.0.43 8.0.42-1 - Rebase to MySQL 8.0.42 Tenable has extracted the preceding description block directly from the Oracle Lin...
RHEL 9 : ncurses (RHSA-2025:16414)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16414 advisory. The ncurses new curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses...
SUSE CVE-2025-59431
MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based SQL injection. It seems like expression checking is bypassed by introducing double quote characters in the PropertyName. Allowing to manipula...
WordPress Admin and Site Enhancements plugin < 7.9.8 - Authenticated Stored XSS via SVG vulnerability
Authenticated Stored XSS via SVG vulnerability discovered by NGUYEN HOANG DUY in WordPress Plugin Admin and Site Enhancements ASE versions 7.9.8...
CVE-2025-57956
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpcraft WooMS wooms allows Stored XSS.This issue affects WooMS: from n/a through = 9.12...
CVE-2025-57942
Cross-Site Request Forgery CSRF vulnerability in andymoyle Emergency Password Reset emergency-password-reset allows Cross Site Request Forgery.This issue affects Emergency Password Reset: from n/a through = 9.3...
WordPress WooMS Plugin <= 9.12 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin WooMS versions = 9.12...
WordPress WooMS Plugin <= 9.12 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin WooMS versions = 9.12...
WordPress Cozy Blocks Plugin <= 2.1.29 - Content Injection Vulnerability
Content Injection Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Cozy Blocks versions = 2.1.29...
CVE-2025-53459
CVE-2025-53459 is rejected by the CVE Numbering Authority and does not represent an active vulnerability entry.
CVE-2025-57938
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.2...