5493 matches found
thunderbird: firefox: Some non-writable Object properties could be modified
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...
[SECURITY] Fedora 43 Update: rust-regex-automata-0.4.13-1.fc43
Automata construction and matching using regular expressions...
[SECURITY] Fedora 43 Update: python-pydantic-2.12.4-1.fc43
Data validation and settings management using python type hinting...
bind security update
9.16.23-31.0.1 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-31.2 - Replace downstream fixes with upstream changes 32:9.16.23-31.1 - Prevent cache poisoning due to weak PRNG CVE-2025-40780 - Address various spoofing attacks CVE-2025-40778...
SUSE CVE-2016-11082
An issue was discovered in Mattermost Server before 2.2.0. It allows XSS via a crafted link...
CVE-2025-64329 vulnerabilities
Vulnerabilities for packages: trivy, tekton-pipelines-fips, apm-server, rancher, steampipe, kubevela, trivy-fips, grype, spegel, chartmuseum, kubevela-fips, cloudbeat, zarf, kube-arangodb-fips, cert-manager-cmctl-fips, consul-k8s-fips, fuse-overlayfs-snapshotter, cg, beats-fips,...
GHSA-M6HQ-P25P-FFR2 vulnerabilities
Vulnerabilities for packages: trivy, tekton-pipelines-fips, apm-server, rancher, steampipe, kubevela, trivy-fips, grype, spegel, chartmuseum, kubevela-fips, cloudbeat, zarf, kube-arangodb-fips, cert-manager-cmctl-fips, consul-k8s-fips, fuse-overlayfs-snapshotter, cg, beats-fips,...
GHSA-QW9X-CQR3-WC7R vulnerabilities
Vulnerabilities for packages: buildah, sriov-network-device-plugin, k3s, falco-no-driver, kubernetes, nvidia-container-toolkit, node-feature-discovery, grafana-alloy, podman...
CVE-2025-31133 vulnerabilities
Vulnerabilities for packages: buildah, sriov-network-device-plugin, k3s, falco-no-driver, kubernetes, nvidia-container-toolkit, node-feature-discovery, grafana-alloy, podman...
runc security update
4:1.2.5-3 - Add relevant patches to CVEs - Resolves: RHEL-122402 4:1.2.5-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122402 - Resolves: RHEL-122404 - Resolves: RHEL-122415 4:1.2.5-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.5 - Related: RHEL-60...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...
CVE-2025-12060 affecting package keras for versions less than 3.3.3-5
CVE-2025-12060 affecting package keras for versions less than 3.3.3-5. A patched version of the package is available...
[SECURITY] Fedora 42 Update: qt5-qttranslations-5.15.18-1.fc42
Qt5 - QtTranslations module...
[SECURITY] Fedora 42 Update: fcitx-qt5-1.2.6-30.fc42
This package provides Fcitx Qt5 input context...
CVE-2025-60753
An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service Out-of-Memory crash...
CVE-2025-64458
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...
CVE-2025-46404
A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...
CVE-2025-62769
Potential SQL injection via connector keyword argument in QuerySet and Q objects...