CVE-2025-46784 affecting package lasso for versions less than 2.9.0-1

CVE-2025-46784 affecting package lasso for versions less than 2.9.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-46404 affecting package lasso for versions less than 2.9.0-1

CVE-2025-46404 affecting package lasso for versions less than 2.9.0-1. An upgraded version of the package is available that resolves this issue...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 3 (7.1.0-193)

This update provides a security fix. Vulnerability id: VSTOR-123590 A security fix for CVE-2025-15467...

📄 Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code Execution

This Metasploit module exploits a OS command injection issue in Ivanti Endpoint Manager Mobile EPMM, formerly known as MobileIron. A remote attacker can achieve unauthenticated RCE with root privileges on an affected device. This module requires Metasploit: https://metasploit.com/download Current...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 11 (6.1.1-72)

This update provides a security fix. Vulnerability id: VSTOR-123590 A security fix for CVE-2025-15467...

CVE-2025-22022 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-22022 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68259 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68259 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-71183 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71183 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-56226 affecting package libsndfile for versions less than 1.2.2-4

CVE-2025-56226 affecting package libsndfile for versions less than 1.2.2-4. A patched version of the package is available...

CVE-2026-21948 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21948 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68806 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68806 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2026-24401 affecting package avahi for versions less than 0.8-7

CVE-2026-24401 affecting package avahi for versions less than 0.8-7. A patched version of the package is available...

CVE-2025-71077 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71077 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-61594 affecting package ruby for versions less than 3.3.5-7

CVE-2025-61594 affecting package ruby for versions less than 3.3.5-7. A patched version of the package is available...

CVE-2025-68336 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68336 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68764 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68764 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-69420 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2025-69420 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

CVE-2026-24684

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsndtreatwave. This vulnerability is fixed in 3.22.0...

CVE-2026-24681

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urbwritecompletion. This vulnerability is fixed in 3.22.0...

CVE-2026-24677

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...