CVE-2025-24206

CVE-2025-24206 is an AirPlay-related authentication bypass affecting Apple devices and AirPlay SDK–enabled products. Public sources confirm local-network access enables bypass of authentication with high impact when combined with other AirPlay vulnerabilities. Affected and fixed versions include ...

CVE-2025-24251

CVE-2025-24251 affects multiple Apple OS releases (macOS Sequoia 15.4; macOS Ventura 13.7.5; macOS Sonoma 14.7.5; iOS 18.4/iPadOS 18.4; tvOS 18.4; watchOS 11.4; visionOS 2.4). The flaw enables a local‑network attacker to cause an unexpected termination of an app due to improved checks implemented...

CVE-2025-24251

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An attacker on the local network may cause an unexpected app termination...

CVE-2025-30445

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination...

CVE-2025-30445

CVE-2025-30445 is a type-confusion vulnerability addressed by Apple across multiple platforms. The issue, triggered by local-network access, could cause an unexpected app termination and was fixed with improved checks. Affected products/versions include macOS Sequoia 15.4, macOS Ventura 13.7.5, m...

CVE-2025-30445

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-070)

The version of kernel installed on the remote host is prior to 5.15.180-122.191. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-070 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-throttle: Set BIOTHROTTLED when...

GHSA-WMJQ-JRM2-9WFR NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file

Issue Snowflake discovered and remediated a vulnerability in the NodeJS Driver for Snowflake “Driver”. When using the Easy Logging feature on Linux and macOS the Driver didn’t correctly verify the permissions of the logging configuration file, potentially allowing an attacker with local access to...

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

PT-2025-19692 · Crates.Io · Mp3-Metadata

The get id3 methods used by mp3 metadata::read from slice does not perform adequate bounds checking when recreating the tag due to the use of desynchronization. Fixed in Fix index error, released as part of 0.4.0...

RHEL 9 : mod_auth_openidc (RHSA-2025:4225)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:4225 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connec...

PT-2025-18016

Name of the Vulnerable Software and Affected Versions Apereo CAS version 5.2.6 Description A vulnerability was found in Apereo CAS, affecting the function ResponseEntity of the file ManageRegisteredServicesMultiActionController.java. The manipulation of the argument Query leads to inefficient...

CLSA-2025-1745587914 libxslt: Fix of CVE-2025-24855

CVE-2025-24855: fix use-after-free of XPath context node...

CLSA-2025-1745530844 libsoup: Fix of CVE-2024-52530

CVE-2024-52530: prevent HTTP request smuggling by properly handling '0' characters at the end of header names...

Security update for glib2

This update for glib2 fixes the following issues: CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with gdatetimenewfromiso8601 bsc1240897 Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

SUSE-SU-2025:1365-1 Security update for mozjs60

This update for mozjs60 fixes the following issues: - CVE-2024-56431: Fixed a negative shift in huffdec.c bsc1234837...

PT-2025-17744 · Woocommerce · Holest Engineering Spreadsheet Price Changer

Name of the Vulnerable Software and Affected Versions: Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions through 2.4.37 Description: The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP...

CLSA-2025-1745426658 buildah: Fix of CVE-2024-9675

CVE-2024-9675: fix incorrect handling of paths in cache mounts that allows mounting of arbitrary directories in a container...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2025:4128)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4128 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connec...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.10 security and extras update

Red Hat OpenShift Container Platform release 4.18.10 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...