CVE-2019-2973 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk, openjdk-17-openj9...

CVE-2019-2975 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk, openjdk-17-openj9...

CVE-2020-2590 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk, openjdk-17-openj9...

CVE-2019-2933 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk, openjdk-17-openj9...

CVE-2019-2958 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-9Q7R-HH98-V46J vulnerabilities

Vulnerabilities for packages: openjdk...

SUSE CVE-2025-23266

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

CVE-2025-38262

In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init When two instances of uart devices are probing, a concurrency race can occur. If one thread calls uartregisterdriver function, which first allocates and assigns memory to...

CVE-2009-2858

Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service memory consumption via unspecified vectors, related to private memory within the DB2 memory structure...

GHSA-389X-67PX-MJG3 vulnerabilities

Vulnerabilities for packages: py3.10-vllm-cuda-11.8...

CVE-2025-30370

CVE-2025-30370 affects the jupyterlab-git JupyterLab extension. When a user opens a repository whose directory name contains a shell command substitution (e.g., $()) and selects “Git > Open Git Repository in Terminal,” the extension previously executed a shell command via a cd to the repositor...

GHSA-CW7X-3MV7-W6XM vulnerabilities

Vulnerabilities for packages: libarchive...

SUSE CVE-2025-1734

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missing a colon : are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers...

Medium: apr

Issue Overview: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr...

Medium: apr

Issue Overview: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr...

Medium: apr

Issue Overview: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr...

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that can be exploited by an attacker to cause a...

CBL Mariner 2.0 Security Update: apr (CVE-2023-49582)

The version of April installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49582 advisory. - Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read...

Mageia: Security Advisory (MGASA-2024-0292)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0292 Updated apr packages fix security vulnerability

Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. CVE-2023-49582...