CVE-2025-46687

quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...

CVE-2025-46688

quickjs-ng through 0.9.0 has an incorrect size calculation in JSReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...

CVE-2025-2866

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This...

[SECURITY] Fedora 41 Update: java-17-openjdk-portable-17.0.15.0.6-1.fc40

The OpenJDK 17 runtime environment - portable edition...

[SECURITY] Fedora 41 Update: java-latest-openjdk-24.0.1.0.9-1.rolling.fc41

The OpenJDK 24 runtime environment...

[SECURITY] Fedora 40 Update: java-1.8.0-openjdk-1.8.0.452.b06-1.fc40

The OpenJDK 8 runtime environment...

[SECURITY] Fedora 42 Update: java-latest-openjdk-24.0.1.0.9-1.rolling.fc42

The OpenJDK 24 runtime environment...

CVE-2025-46646

In Artifex Ghostscript before 10.05.0, decodeutf8 in base/gputf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954...

CVE-2025-27820 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, opensearch...

CVE-2025-43859 vulnerabilities

Vulnerabilities for packages: airflow, localstack, kserve, kubeflow-pipelines-visualization-server, reflex, mitmproxy, jupyter-base-notebook, nemo, checkov, pgadmin4...

GHSA-VQFR-H8MV-GHFJ vulnerabilities

Vulnerabilities for packages: airflow, localstack, kserve, kubeflow-pipelines-visualization-server, reflex, mitmproxy, jupyter-base-notebook, nemo, checkov, pgadmin4...

CVE-2025-32044

A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exceptionignoreargs = 1 in the...

CVE-2025-3636

A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficient capability checks...

CVE-2025-3642

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled...

CVE-2025-32045

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades...

CVE-2025-3647

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

CVE-2025-43859

h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in version 0.16.0. Since exploitation requires...

GHSA-PMC3-P9HX-JQ96 vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2025-46420

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

GHSA-PMC3-P9HX-JQ96 vulnerabilities

Vulnerabilities for packages: nuclei...