10925 matches found
CVE-2025-49976 WordPress WANotifier plugin <= 2.7.7 - Broken Access Control Vulnerability
Missing Authorization vulnerability in WANotifier WANotifier allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WANotifier: from n/a through 2.7.7...
CVE-2024-7586
An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, where webhook deletion audit log preserved auth credentials...
SUSE-SU-2025:02050-1 Security update for python39
This update for python39 fixes the following issues: python39 was updated from version 3.9.21 to version 3.9.23: - Security issues fixed: CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS bsc1243273 CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-451...
CVE-2022-50014
In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix FOLLFORCE COW security issue and remove FOLLCOW Ever since the Dirty COW CVE-2016-5195 security issue happened, we know that FOLLFORCE can be possibly dangerous, especially if there are races that can be exploited by...
openSUSE Security Advisory (SUSE-SU-2025:01988-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-32875
An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither initiated nor enforced by the application itself. Also, the watch does not enforce pairing and bonding. As a result, any data transmitted via BLE remains unencrypted, allowing...
GHSA-PQ67-6M6Q-MJ2V vulnerabilities
Vulnerabilities for packages: barman, confluent-docker-utils, mlflow, superset, kserve, ansible-operator, dask-kubernetes, openstack-kolla-toolbox-2025.2-fips, datadog-agent, azure-functions-host, pgadmin4, ggshield, emissary, kubeflow-pipelines, request-1276, pgadmin4-fips, tensorflow-cpu-jupyte...
CVE-2022-50208
In the Linux kernel, the following vulnerability has been resolved: soc: amlogic: Fix refcount leak in meson-secure-pwrc.c In mesonsecurepwrcprobe, there is a refcount leak in one fail path...
SUSE: Security Advisory (SUSE-SU-2025:01983-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Operationalize Cloud Security in Zendesk: Wiz Now Available on the Zendesk Marketplace
Streamline remediation by delivering prioritized security issues straight to Zendesk...
GHSA-8QVM-5X2C-J2W7 vulnerabilities
Vulnerabilities for packages: kserve...
GHSA-8QVM-5X2C-J2W7 vulnerabilities
Vulnerabilities for packages: kserve, ghidra, text-generation-inference, nemo, request-1276, awx, spamcheck...
GHSA-22V5-Q59J-H85M vulnerabilities
Vulnerabilities for packages: chromium...
SUSE-SU-2025:01990-1 Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 for building bsc1236516 CVE-2025-22870: Bump golang.org/x/net to version 0.39.0 bsc1238686 - Version was updated to 2.53.4 with the following bug fixes:...
GHSA-22V5-Q59J-H85M vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X573-8WX6-VHF4 vulnerabilities
Vulnerabilities for packages: chromium...
Veeam Backup and Replication 12.x < 12.3.2.3617 Multiple Vulnerabilities (June 2025) (KB4743)
The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.2.3617. It is, therefore, affected by multiple vulnerabilities: - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user. CVE-2025-23121 - A...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Requests vulnerabilities (USN-7568-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7568-1 advisory. Dennis Brinkrolf and Tobias Funke discovered that Requests did not correctly...
[slackware-security] xorg-server
New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-16slack15.0.txz: Rebuilt. This update fixes security issues: Out-of-bounds access in X Rendering extensi...