12577 matches found
OPENSUSE-SU-2025:14705-1 kernel-devel-longterm-6.12.11-1.1 on GA media
These are all security issues fixed in the kernel-devel-longterm-6.12.11-1.1 package on the GA media of openSUSE Tumbleweed...
DLA-4033-1 libtar - security update
Bulletin has no description...
CVE-2024-54518
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory...
CVE-2025-24365 vaultwarden allows escalation of privilege via variable confusion in OrgHeaders trait
vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. Attacker can obtain owner rights of other organization. Hacker should know the ID of victim organization in real case the user can be a part of the organization as an unprivileged user and be...
Advisory ROSA-SA-2025-2600
software: qt5-qtnetworkauth 5.15.10 WASP: ROSA-CHROME packageevrstring: qt5-qtnetworkauth-5.15.10-2 CVE-ID: CVE-2024-36048 BDU-ID: None CVE-Crit: DATA LOSS. CVE-DESC.: Vulnerability in Qt Network Authorization allows guessing values due to using only time for PRNG initialization. CVE-STATUS: The...
Advisory ROSA-SA-2025-2592
software: traceroute 2.1.5 WASP: ROSA-CHROME packageevrstring: traceroute-2.1.5-1 CVE-ID: CVE-2023-46316 BDU-ID: 2023-07542 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the buc Traceroute utility is related to improper handling of lines of code. Exploitation of the vulnerability could allow ...
Advisory ROSA-SA-2025-2590
software: vim 9.1.0754 WASP: ROSA-CHROME packageevrstring: vim-9.1.0754-1 CVE-ID: CVE-2024-41957 BDU-ID: 2024-06478 CVE-Crit: LOW CVE-DESC.: A vulnerability in the tagstackclearentry function of the src/alloc.c file of the vim text editor exists due to a bug in the use of pointers after memory...
Advisory ROSA-SA-2025-2586
software: nano 8.2 OS: ROSA-CHROME packageevrstring: nano-8.2-3 CVE-ID: CVE-2024-5742 BDU-ID: 2024-06879 CVE-Crit: LOW CVE-DESC.: A vulnerability in the Nano text editor is related to temporary file handling errors. Exploitation of the vulnerability could allow an attacker to impact data integrit...
Advisory ROSA-SA-2025-2585
software: xorgxrdp 0.10.2 OS: ROSA-CHROME packageevrstring: xorgxrdp-0.10.2-1 CVE-ID: CVE-2024-39917 BDU-ID: 2024-10780 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the authentication mechanism of the XRDP remote access tool is related to a flaw in the limitation of authentication attempts...
Advisory ROSA-SA-2025-2572
software: squid 5.10 OS: ROSA-CHROME packageevrstring: squid-5.10-1 CVE-ID: CVE-2024-45802 BDU-ID: 2024-08860 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Squid proxy server is related to input processing errors. Exploitation of the vulnerability could allow an attacker acting remotely to cau...
PT-2025-1846 · WordPress · Wp Customer Area
Name of the Vulnerable Software and Affected Versions: WP Customer Area versions 8.2.4 and earlier Description: The issue is related to the lack of CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks. Recommendations: WP Custom...
JVN#05508012: EXIF Viewer Classic vulnerable to cross-site scripting
EXIF Viewer Classic provided by Rodrigue former Kakera is a Google Chrome browser extension. The affected versions of the product improperly handle EXIF meta data, resulting in a cross-site scripting vulnerability CWE-79. Versions 2.3.2 and 2.4.0 were reported as vulnerable. The vendor informs us...
PT-2025-5272 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 Description: The issue is related to incorrect permission handling, which may allow an app to access protected user data. This was addressed with additional permissions checks. Recommendations: For versions prior ...
PT-2025-22015 · Apple · Ipados +6
Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 Description: A permissions issue was addressed with...
OPENSUSE-SU-2025:14699-1 gstreamer-plugins-good-1.24.11-2.1 on GA media
These are all security issues fixed in the gstreamer-plugins-good-1.24.11-2.1 package on the GA media of openSUSE Tumbleweed...
DSA-5851-1 openjpeg2 - security update
Bulletin has no description...
CGA-X48W-MF5W-776H
Bulletin has no description...
OPENSUSE-SU-2025:0033-1 Security update for qt6-connectivity
This update for qt6-connectivity fixes the following issues: - CVE-2025-23050: Fixed buffer over-read and division by zero boo1236237...
CVE-2025-22608 Coolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS)
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to revoke any team invitations on a Coolify instance by only providing a predictable and incrementing ID,...