CVE-2025-65843

Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The application follows symbolic links placed inside the /Library/Logs/Aquarius directory and treats them as regular files. When building the support ZIP, Aquarius...

[SECURITY] Fedora 41 Update: nextcloud-32.0.2-1.fc41

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

Debian dla-4389 : libtorch-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4389 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4389-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-65843

Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The application follows symbolic links placed inside the /Library/Logs/Aquarius directory and treats them as regular files. When building the support ZIP, Aquarius...

CVE-2025-65843

Aquarius Desktop 3.0.069 for macOS is affected by an insecure file handling vulnerability within its support data archive generation feature. The root cause is the application's use of a JUCE directory iterator configured to follow symbolic links while processing logs in the ~/Library/Logs/Aquari...

[SECURITY] Fedora 42 Update: unbound-1.24.2-1.fc42

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

[SECURITY] Fedora 42 Update: gnutls-3.8.11-1.fc42

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

Oracle Linux 8 : firefox (ELSA-2025-22363)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-22363 advisory. 140.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.5.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...

MS12-036: Vulnerabilities in Remote Desktop could allow remote code execution: June 12, 2012

MS12-036: Vulnerabilities in Remote Desktop could allow remote code execution: June 12, 2012 Not sure if this is the right fix? We've added this issue to our memory dump diagnostic which can confirm. Microsoft has released security bulletin MS12-036. To view the complete security bulletin, go to...

MS11-077: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: October 11, 2011

MS11-077: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: October 11, 2011 Microsoft has released security bulletin MS11-077. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS13-002: Description of the security update for XML Core Services 3.0 and 6.0: January 8, 2013

MS13-002: Description of the security update for XML Core Services 3.0 and 6.0: January 8, 2013 Microsoft has released security bulletin MS13-002. To view the complete security bulletin, go to one of the following Microsoft websites: Home users:...

MS12-078: Description of the security update for Windows kernel-mode drivers: December 11, 2012

MS12-078: Description of the security update for Windows kernel-mode drivers: December 11, 2012 INTRODUCTION Microsoft has released security bulletin MS12-078. To view the complete security bulletin, go to one of the following Microsoft websites: Home users:...

MS12-082: Vulnerability in DirectPlay could allow remote code execution: December 11, 2012

MS12-082: Vulnerability in DirectPlay could allow remote code execution: December 11, 2012 INTRODUCTION Microsoft has released security bulletin MS12-082. To view the complete security bulletin, go to one of the following Microsoft websites: Home users:...

MS11-019: Vulnerabilities in SMB Client could allow remote code execution: April 12, 2011

MS11-019: Vulnerabilities in SMB Client could allow remote code execution: April 12, 2011 Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more information,...

MS16-029: Description of the security update for Office 2016 for Mac: March 16, 2016

MS16-029: Description of the security update for Office 2016 for Mac: March 16, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

openSUSE 16 Security Update : tcpreplay (openSUSE-SU-2025-20119-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20119-1 advisory. - update to 4.5.2: features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AFXDP socket suppor...

Description of the security update for the elevation of privilege vulnerability in Visual Studio 2015 Update 3: September 11, 2018

Description of the security update for the elevation of privilege vulnerability in Visual Studio 2015 Update 3: September 11, 2018 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Note Notice In November 2020, the content of this article was updated to clarify the affected...

firefox: thunderbird: Use-after-free in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...

firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Notifications component...