List of Security Fixes and Improvements in Veeam Plug-in for Proxmox VE

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Proxmox VE. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...

List of Security Fixes and Improvements in Veeam Plug-in for Xen

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Xen. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security Fixes a...

List of Security Fixes and Improvements in Veeam Plug-in for oVirt KVM

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for oVirt KVM. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...

List of Security Fixes and Improvements in Veeam Plug-in for Scale Computing HyperCore

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Scale Computing HyperCore. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between...

CVE-2026-46421 Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)

The SAP Cloud Application Programming Model is a tool for building enterprise-grade cloud applications, and cap-js/cds-dbs is the monorepo for SQL database services for that tool. On April 29, 2026, compromised versions of @cap-js/[email protected], @cap-js/[email protected], and @cap-js/[email protected]....

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the aggregate function callbacks in Databasecreateaggregate, createaggregatehandler, and Databasedefineaggregator. An attacker can trigger an invalid memory read and segmentation fault by keeping a prepared statement...

Security Bulletin: AIX/VIOS is vulnerable to a memory corruption issue (CVE-2025-6965) due to RPM

Summary Vulnerability in RPM could allow an attacker to cause a memory corruption issue CVE-2025-6965. RPM is used by AIX for package management. Vulnerability Details CVEID:CVE-2025-6965 DESCRIPTION: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate term...

[R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.4.x, 6.5.1 and 6.6.0: SC-202508.1

R1 Stand-alone Security Patches Available for Tenable Security Center versions 6.4.x, 6.5.1 and 6.6.0: SC-202508.1 Arnie Cabral Thu, 08/28/2025 - 11:18 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components Apache, PHP, sqlit...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in ORDER BY clauses. An attacker can cause denial of service or access sensitive process memory via crafted SELECT statement with a large number of terms in the ORDER BY clause. Remediation Upgrade sqlite3...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via maliciously crafted SQL queries made via editing the Database File, it is possible to query a record and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain...