1089 matches found
curl bug fix and enhancement update
An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...
PT-2025-20223 · WordPress · Rs Wp Book Showcase
Name of the Vulnerable Software and Affected Versions: RS WP Book Showcase versions through 6.7.40 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker can inje...
PT-2025-20044 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR May-2025 Release 1 Description: The issue concerns the use of implicit intent for sensitive communication in the Wi-Fi P2P service, allowing local attackers to access sensitive information. Recommendations: For...
Azure Linux 3.0 Security Update: kernel (CVE-2025-21631)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21631 advisory. - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix wakerbfqq UAF after...
CVE-2025-21756 affecting package kernel for versions less than 5.15.180.1-1
CVE-2025-21756 affecting package kernel for versions less than 5.15.180.1-1. An upgraded version of the package is available that resolves this issue...
chromedriver-136.0.7103.59-1.1 on GA media (moderate)
chromedriver-136.0.7103.59-1.1 on GA media Announcement ID: openSUSE-SU-2025:15051-1 Rating: moderate Cross-References: CVE-2025-4050 CVE-2025-4051 CVE-2025-4052 CVE-2025-4096 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These a...
MGASA-2025-0141 Updated imagemagick packages fix security vulnerabilities
In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used. CVE-2025-43965 In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...
java-21-openjdk-21.0.7.0-1.1 on GA media (moderate)
java-21-openjdk-21.0.7.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15024-1 Rating: moderate Cross-References: CVE-2025-21587 CVE-2025-30691 CVE-2025-30698 CVSS scores: CVE-2025-21587 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-21587 SUSE : 9.1...
java-11-openjdk-11.0.27.0-1.1 on GA media (moderate)
java-11-openjdk-11.0.27.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15022-1 Rating: moderate Cross-References: CVE-2025-21587 CVE-2025-30691 CVE-2025-30698 CVSS scores: CVE-2025-21587 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-21587 SUSE : 9.1...
PT-2025-17716
Name of the Vulnerable Software and Affected Versions Flynax Bridge plugin for WordPress versions up to and including 2.2.0 Description The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover. This issue arises because the plugin does not properly validat...
PT-2025-17448 · Traefik · Traefik
Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.11.24 Traefik versions prior to 3.3.6 Traefik versions prior to 3.4.0-rc2 Description: The issue concerns Traefik, an HTTP reverse proxy and load balancer, where a potential vulnerability exists in managing request...
DLA-4133-1 wget - security update
Bulletin has no description...
SUSE-SU-2025:1330-1 Security update for rsync
This update for rsync fixes the following issues: - Fixed bwlimit=0 option broken by CVE-2024-12088 fix bsc1239649...
PT-2025-16797 · Unknown +1 · Baguettebox.Js +1
Name of the Vulnerable Software and Affected Versions: baguetteBox.Js versions 0.0.0 through 2.0.3 baguetteBox.Js versions 3.0.0 through 3.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, in the...
Fedora 41 : podman-tui (2025-f1d2ae375e)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f1d2ae375e advisory. release 1.5.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
SUSE-SU-2025:1213-1 Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-15030059153 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tundetach bsc1232818. - CVE-2022-49563: crypto: qat - add param check for RSA bsc1238788. - CVE-2022-49564: crypto: qat - add param...
liblzma5-32bit-5.8.1-1.1 on GA media (moderate)
liblzma5-32bit-5.8.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14984-1 Rating: moderate Cross-References: CVE-2025-31115 CVSS scores: CVE-2025-31115 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2025-31115 SUSE : 8.8...
CVE-2025-26635
creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...