59740 matches found
SUSE-SU-2025:20334-1 Security update for perl
This update for perl fixes the following issues: - CVE-2024-56406: Fixed heap buffer overflow with tr// bsc1241083...
PT-2025-29902
Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit versions up to 1.17.7 GPU Operator versions up to 25.3.0 NVIDIA Container Toolkit versions 1.17.8 and 25.3.1 are fixed. Description A critical vulnerability CVE-2025-23266, dubbed “NVIDIAScape”, exists in the NVIDIA...
SUSE-SU-2025:20328-1 Security update for elemental-operator
This update for elemental-operator fixes the following issues: - Updated to v1.7.2: Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the Key Exchange of...
Security update for elemental-operator
This update for elemental-operator fixes the following issues: Updated to v1.7.2: Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the Key Exchange of...
CVE-2025-43004
Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards PODs that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view...
The vulnerability of operating systems visionOS, macOS Ventura, tvOS, iPadOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma is related to a logical error in the operator precedence, which allows attackers to disclose sensitive information.
The vulnerability of operating systems visionOS, macOS Ventura, tvOS, iPadOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma is related to a logical operator precedence error. Exploiting this vulnerability can allow attackers to disclose sensitive information...
The vulnerability of operating systems visionOS, macOS Ventura, tvOS, iPadOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma is related to a logical error in the operator precedence, which allows attackers to disclose sensitive information.
The vulnerability of operating systems visionOS, macOS Ventura, tvOS, iPadOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma is related to a logical operator precedence error. Exploiting this vulnerability can allow attackers to disclose sensitive information...
perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes
A flaw was found in Perl. This vulnerability allows a heap buffer overflow, which can lead to denial of service and potential arbitrary code execution on platforms that lack sufficient defenses via specially crafted input to the tr/// transliteration operator containing non-ASCII bytes on the...
CVE-2025-43004
Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards PODs that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view...
CVE-2025-43004
The CVE-2025-43004 entry describes a security misconfiguration in SAP Digital Manufacturing Production Operator Dashboards (PODs) that allows unauthenticated external access to non-sensitive customer data. The root cause is lack of enforcement of authentication, with no indication that integrity ...
CVE-2025-43004 Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)
Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards PODs that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view...
CVE-2025-43004 Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)
Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards PODs that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view...
PT-2025-20816 · Sap Se · Sap Digital Manufacturing
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A security misconfiguration issue allows customers to create Production Operator Dashboards PODs that permit outside users to access customer data without proper authentication. This enables...
The vulnerability of the Queue Manager, a software tool for managing containerized environments by IBM MQ Operator, allows a intruder to cause a service failure.
The vulnerability of the Queue Manager, a software tool for managing containerized environments in IBM MQ Operator, relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the CP4I service (Cloud Pak for Integration) Keycloak Service, a software solution for managing containerized environments like IBM MQ Operator, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the CP4I service Cloud Pak for Integration Keycloak Service, a software solution for managing containerized environments in IBM MQ Operator, is related to information leakage through the process environment. Exploiting this vulnerability could allow an attacker to gain...
OESA-2025-1470 perl security update
Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: A heap buffer overflow vulnerability was...
OESA-2025-1473 perl security update
Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: A heap buffer overflow vulnerability was...
OESA-2025-1472 perl security update
Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: A heap buffer overflow vulnerability was...
uri: userinfo leakage in URI#join, URI#merge and URI#+
A flaw was found in the URI ruby gem package, where userinfo leakage can occur in the uri gem. The methods URIjoin, URImerge, and URI+ retained userinfo, such as user:password, even after the host is replaced. When generating a URL to a malicious host from a URL containing secret userinfo using...
