gnutls: Vulnerability in GnuTLS SCT extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

Security update for raptor

This update for raptor fixes the following issues: CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673 CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674 Patch Instructions: To install this SUSE update use...

SUSE-SU-2025:03244-1 Security update for raptor

This update for raptor fixes the following issues: - CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673 - CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674...

CLSA-2025-1758102067 php: Fix of CVE-2020-7059

CVE-2020-7059: fix read past the allocated buffer in the fgetss function...

fly-wm Buffer Overflow DoS

The vulnerability of the fly-wm window graphical manager is related to reading data beyond the allowable buffer limit. Exploiting this vulnerability can allow an attacker to cause a service failure...

fd_index() Program Privilege Escalation

The vulnerability of the fdindex function in the Udisks device management and storage-related operations is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges and cause service failures...

fly-adjust-palette Utility DoS

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

PARSEC security subsystem Heap Buffer Overflow DoS

The vulnerability of the pdpmlrlobstackprintf function in the PARSEC security subsystem is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

fly-wm DoS

The vulnerability of the fly-wmpam window management tool is related to reading data beyond the allowable buffer limit. Exploiting this vulnerability could allow an attacker to cause a service failure...

CLSA-2025-1757946824 php: Fix of CVE-2024-8929

CVE-2024-8929: Security fix for heap buffer over-read in mysqlnd leading to possible information disclosure GHSA-h35g-vwh6-m678...

CLSA-2025-1757923104 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode function in posix/regexec.c...

macOS 14.x < 14.8 Multiple Vulnerabilities (125112)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8. It is, therefore, affected by multiple vulnerabilities: - This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be...

Linux Distros Unpatched Vulnerability : CVE-2025-39787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: qcom: mdtloader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not...

Microsoft Office Buffer Overflow Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

HTTP.sys DoS

The vulnerability of the HTTP.sys driver on Windows operating systems is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

CLSA-2025-1757700075 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

CLSA-2025-1757690876 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

CLSA-2025-1757690669 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

OESA-2025-2274 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...