4468 matches found
MGASA-2025-0248 Updated libtpms package fixes security vulnerability
It was discovered that libtpms had a potential out-of-bound access & abort due to HMAC signing issue CVE-2025-49133...
Updated libtpms package fixes security vulnerability
It was discovered that libtpms had a potential out-of-bound access & abort due to HMAC signing issue CVE-2025-49133...
kernel security update
4.18.0-553.81.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
CVE-2025-48428
Cleartext Storage of Sensitive Information CWE-312 in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Server to export a specific signing key while in use allowing them to deploy a compromised or counterfeit device on that site. This issue...
EulerOS 2.0 SP13 : libssh (EulerOS-SA-2025-2299)
According to the versions of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw...
SUSE CVE-2025-62705
OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64,...
CVE-2025-48428
Cleartext Storage of Sensitive Information CWE-312 in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Server to export a specific signing key while in use allowing them to deploy a compromised or counterfeit device on that site. This issue...
CVE-2025-48428
Cleartext Storage of Sensitive Information CWE-312 in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Server to export a specific signing key while in use allowing them to deploy a compromised or counterfeit device on that site. This issue...
CVE-2025-48428
Cleartext Storage of Sensitive Information CWE-312 in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Server to export a specific signing key while in use allowing them to deploy a compromised or counterfeit device on that site. This issue...
EUVD-2025-35648
Cleartext Storage of Sensitive Information CWE-312 in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Server to export a specific signing key while in use allowing them to deploy a compromised or counterfeit device on that site. This issue...
CVE-2025-48428
CVE-2025-48428 involves Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration within Gallagher Command Centre Server. A authenticated user with access to the Command Centre Server could export a specific signing key while it is in use, potentially enabling deplo...
CVE-2025-48428: Cleartext Storage of Sensitive Information
Cleartext Storage of Sensitive Information CWE-312 in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Server to export a specific signing key while in use allowing them to deploy a compromised or counterfeit device on that site. This issue...
PT-2025-43424
Name of the Vulnerable Software and Affected Versions Gallagher Command Centre Server versions prior to 9.20.2819 MR4 Gallagher Command Centre Server versions prior to 9.10.3672 MR7 Gallagher Command Centre Server versions prior to 9.00.3831 MR8 Gallagher Command Centre Server version 8.90...
CVE-2025-62705
OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64,...
CVE-2025-62705
OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64,...
CVE-2025-62705 OpenBao and Vault Leak []byte Fields in Audit Logs
OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64,...
GHSA-RC54-2G2C-G36G OpenBao and Vault Leak []byte Fields in Audit Logs
Impact OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to: - sys/raw with use of encoding=base64, all data would be emitted unredacted to the audit log. - Transit, when performing...
CVE-2025-57521
Bambu Studio versions 2.1.1.52 and earlier are vulnerable to arbitrary code execution during application startup. The root cause is the application's failure to validate the digital signature or verify the authenticity of a loaded network plugin . A local attacker can exploit this by placing a ma...