TencentOS Server 4: mysql (TSSA-2025:0613)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0613 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

cflow-1.8-2.1 on GA media (moderate)

cflow-1.8-2.1 on GA media Announcement ID: openSUSE-SU-2025:15459-1 Rating: moderate Cross-References: CVE-2023-6031 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the cflow-1.8-2.1 package o...

gstreamer-devtools-1.26.5-1.1 on GA media (moderate)

gstreamer-devtools-1.26.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:15446-1 Rating: moderate Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-55159 SUSE : 5.8...

framework_tool-0.4.5-2.1 on GA media (moderate)

frameworktool-0.4.5-2.1 on GA media Announcement ID: openSUSE-SU-2025:15445-1 Rating: moderate Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-55159 SUSE : 5.8...

fractal-12.0-2.1 on GA media (moderate)

fractal-12.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15439-1 Rating: moderate Cross-References: CVE-2055-55159 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the fractal-12.0-2.1...

framework-inputmodule-control-0.2.0-3.1 on GA media (moderate)

framework-inputmodule-control-0.2.0-3.1 on GA media Announcement ID: openSUSE-SU-2025:15433-1 Rating: moderate Cross-References: CVE-2023-53156 CVE-2024-58266 CVSS scores: CVE-2023-53156 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2023-53156 SUSE : 6.9...

Intel® Rapid Storage Technology Software Advisory

Summary: A potential security vulnerability for Intel® Rapid Storage Technology installation software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20099 Description: Improper access control...

Fedora 43 : golang-github-prometheus (2025-3afa669ec0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3afa669ec0 advisory. Automatic update for golang-github-prometheus-2.55.1-1.fc43. Changelog Thu Jul 17 2025 Mikel Olasagasti Uranga - 2.55.1-1 - Update to 2.55.1 and ado...

Oracle VirtualBox Security Update (Jul 2025) - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

TencentOS Server 3: libxslt (TSSA-2025:0489)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0489 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2024-38816, CVE-2024-38808, CVE-2024-35952)

Summary IBM Security Guardium has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-38816 DESCRIPTION: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can cra...

TencentOS Server 4: python-cryptography (TSSA-2024:0825)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0825 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Fedora: Security Advisory (FEDORA-2025-7f48333f3e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-28620

A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers versions: Prior to node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware...

CVE-2022-28625

A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...

CVE-2019-13466

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available...

CVE-2025-47290

CVE-2025-47290 affects containerd v2.1.0, where a TOCTOU flaw during image unpack could allow an attacker to arbitrarily modify the host filesystem. The issue is limited to 2.1.0; 2.1.1 fixes it. Affected guidance: upgrade to containerd 2.1.1+; as a workaround, use only trusted images and restric...

VMSA-2025-0007: VMware Tools update addresses an insecure file handling vulnerability (CVE-2025-22247)

Advisory ID: | VMSA-2025-0007 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 6.1 Synopsis: | VMware Tools update addresses an insecure file handling vulnerability CVE-2025-22247 Issue date: | 2025-05-12 Updated on: | 2025-05-12 Initial Advisory CVEs | CVE-2025-22247 1. Impacted Products...

CVE-2025-44021

OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling if a deployment was performed via the API. A malicious project assigned as a node owner can provide a path to any local file readable by ironic-conductor, which may then be written to the target...

CVE-2025-21763 affecting package kernel for versions less than 5.15.180.1-1

CVE-2025-21763 affecting package kernel for versions less than 5.15.180.1-1. An upgraded version of the package is available that resolves this issue...