CVE-2025-49179 affecting package xorg-x11-server for versions less than 1.20.10-16

CVE-2025-49179 affecting package xorg-x11-server for versions less than 1.20.10-16. A patched version of the package is available...

CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18

CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18. A patched version of the package is available...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grubcryptomemcmp bsc1234959 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

CVE-2025-5061

The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpieparseuploaddata' function in all versions up to, and including, 3.9.29. This makes it possible for authenticated attackers, with Subscriber-level access and above...

s390/pkey: Prevent overflow in size calculation for memdup_user()

...

ACPICA: fix acpi parse and parseext cache leaks

...

CVE-2025-8548

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function sendEmailCode of the file src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java of the component Registered Email Handler. The manipulation of the argument email lea...

CVE-2025-54387

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...

CVE-2025-54784

SuiteCRM 7.14.0–7.14.6 contains a Cross Site Scripting (XSS) vulnerability in the email viewer. An attacker can trigger payloads by a logged-in user simply viewing emails, potentially allowing arbitrary actions, data extraction, or takeover if the user is an admin. A fix is available in version 7...

CVE-2025-54783

CVE-2025-54783 affects SuiteCRM up to version 7.14.6, with a reflected XSS vulnerability triggered by modifying the HTTP Referer header to inject JavaScript. The server may block the domain but still execute the injected script. Remediation is to upgrade to SuiteCRM 7.14.7 or later. No exploitati...

Linux Distros Unpatched Vulnerability : CVE-2024-57877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NTARMPOE Currently poeset doesn't initialize the...

Linux Distros Unpatched Vulnerability : CVE-2022-49768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 9p: transfd/p9conncancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to loca...

Linux Distros Unpatched Vulnerability : CVE-2020-26964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to th...

Linux Distros Unpatched Vulnerability : CVE-2021-2412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily...

Linux Distros Unpatched Vulnerability : CVE-2023-52927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: allow exp not to be removed in nfctfindexpectation Currently nfconntrackin calling nfctfindexpectation will remove the exp from the hash table...

CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38051 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38051 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38208 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38208 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-20215

A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeting-join process in place of an intended targeted user, provided the requisite conditions were satisfied. Cisco has addressed this...