26405 matches found
Important: amazon-cloudwatch-agent
Issue Overview: Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. CVE-2024-34155 Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a...
SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2025:0783-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0783-1 advisory. Security Vulnerabilities fixed in Firefox ESR 128.8 MFSA 2025-16 bsc1237683 - CVE-2024-43097: Overflow when growing an SkRegion's RunArray -...
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-7333-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7333-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...
openSUSE Security Advisory (SUSE-SU-2025:0776-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: Satellite 6.16.3 Async Update
A new release is now available for Red Hat Satellite 6.16 for RHEL 8 and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
SUSE-SU-2025:0783-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Security Vulnerabilities fixed in Firefox ESR 128.8 MFSA 2025-16 bsc1237683 - CVE-2024-43097: Overflow when growing an SkRegion's RunArray - CVE-2025-1930: AudioIPC StreamData could trigger a use-after-free in the Browser process -...
LinkedIn Phishing Scam: Fake InMail Messages Spreading ConnectWise Trojan
Cofense uncovers new LinkedIn phishing scam delivering ConnectWise RAT. Learn how attackers bypass security with fake InMail emails…...
CVE-2025-1916
creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6483 2025-03-05 06:04:06+00:00| seen| https://t.me/cvedetector/19578 2025-03-05 06:44:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114108469900652674 2025-03-05...
Ubuntu 24.04 LTS / 24.10 : Linux kernel vulnerabilities (USN-7322-1)
The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7322-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects...
CVE-2025-1260
CVE-2025-1260 affects Arista EOS when OpenConfig is enabled with a gNOI server; a gNOI request can be processed when it should be rejected, potentially causing unexpected configuration/operations on vulnerable switches. Affected EOS releases include multiple 4.3x/4.2x trains (examples listed in A...
CVE-2025-23410
creationtimestamp| type| source ---|---|--- 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07 2025-03-05 00:33:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6467 2025-03-05 01:49:26+00:00| seen|...
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for February 2025.
Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.1-IF001 and IBM Business Automation Insights 24.0.0-IF002 Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management...
KLA81176 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability can be exploited ...
Linux Distros Unpatched Vulnerability : CVE-2019-11045
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as...
Security Vulnerabilities fixed in Thunderbird 136 — Mozilla
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could hav...
Security Bulletin: NVIDIA Hopper HGX 8-GPU HMC - March 2025
NVIDIA has released a software update for NVIDIA® Hopper HGX 8-GPU HMC. To protect your system, download and install the appropriate firmware update. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities that this security update addresses and their...
Security Vulnerabilities fixed in Thunderbird ESR 128.8 — Mozilla
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could hav...
Mozilla Firefox ESR < 115.21
The version of Firefox ESR installed on the remote Windows host is prior to 115.21. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-15 advisory. - Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbir...
MGASA-2025-0086 Updated x11-server, x11-server-xwayland & tigervnc packages fix security vulnerabilities
Use-after-free of the root cursor. CVE-2025-26594 Buffer overflow in XkbVModMaskText. CVE-2025-26595 Heap overflow in XkbWriteKeySyms. CVE-2025-26596 Buffer overflow in XkbChangeTypesOfKey. CVE-2025-26597 Out-of-bounds write in CreatePointerBarrierClient. CVE-2025-26598 Use of uninitialized point...