Alibaba Cloud Linux 3 : 0022: nodejs:14 (ALINUX3-SA-2021:0022)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0022 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-10531: An issue was discovered in...

Alibaba Cloud Linux 3 : 0048: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0048)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0048 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-47929: In the Linux kernel before...

Alibaba Cloud Linux 3 : 0171: postgresql:13 (ALINUX3-SA-2024:0171)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0171 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-7348: Time-of-check Time-of-use TOCTOU rac...

Alibaba Cloud Linux 3 : 0202: cairo and pixman (ALINUX3-SA-2022:0202)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0202 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-35492: A flaw was found in cairo's...

Alibaba Cloud Linux 3 : 0274: python3.11-cryptography (ALINUX3-SA-2024:0274)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0274 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-23931: cryptography is a package...

Alibaba Cloud Linux 3 : 0040: python3 (ALINUX3-SA-2024:0040)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0040 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2007-4559: Directory traversal...

Alibaba Cloud Linux 3 : 0174: pcp (ALINUX3-SA-2024:0174)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0174 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-45769: A vulnerability was found ...

Alibaba Cloud Linux 3 : 0146: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2022:0146)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0146 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-32250: net/netfilter/nftablesapi.c in the...

Alibaba Cloud Linux 3 : 0074: virt:rhel (ALINUX3-SA-2022:0074)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0074 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-12155: interfacereleaseresource i...

Alibaba Cloud Linux 3 : 0055: go-toolset:rhel8 (ALINUX3-SA-2023:0055)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0055 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-29402: The go command may generat...

[slackware-security] screen

New screen packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/screen-4.9.1-i586-1slack15.0.txz: Upgraded. This update fixes security issues: attacher.c - prevent temporary 0666 mode on PTYs. avoid...

Microsoft and Adobe Patch Tuesday, May 2025 Security Update Review

Microsoft's May 2025 Patch Tuesday rolls out critical security updates, addressing multiple vulnerabilities across Windows, Office, and other key products. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for May 2025 In this month's Patch Tuesday, May 2025 edition,...

Vulnerabilities fixed in Microsoft Dynamics Dataverse

Microsoft has fixed vulnerabilities in Dynamics Dataverse. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges and execute arbitrary code with application privileges. For the vulnerability with reference CVE-2025-47732, Microsoft has released updates in th...

CVE-2025-26685

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 17:14:25+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0157 2025-05-13 18:30:52+00:00| seen|...

CVE-2025-30207

Kirby (open-source CMS) is affected by a path traversal vulnerability in its router when using PHP’s built-in server. Versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 allow an attacker to navigate files outside the Kirby installation via the router delegating all existing files to PHP, enabling exi...

Update to How CISA Shares Cyber-Related Alerts and Notifications

Update May 13 : In an effort to enhance user experience and highlight the most timely and actionable information for cyber defenders, CISA announced a shift in how we share cybersecurity alerts and advisories. We recognize this has caused some confusion in the cyber community. As such, we have...

mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests

A vulnerability was found in modproxycluster. The issue is that the directive should be replaced by the directive as the former does not restrict IP/host access as Require ip IPADDRESS would suggest. This means that anyone with access to the host might send MCMP requests that may result in...

CVE-2025-32917

Privilege escalation in jarsignature agent plugin in Checkmk versions 2.4.0b7 beta, 2.3.0p32, 2.2.0p42, and 2.1.0p49 EOL allow user with write access to JAVAHOME/bin directory to escalate privileges...

RHSA-2025:4797 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed vulnerabilities in iOS and iPadOS. The vulnerabilities include a range of problems, such as memory corruption, unauthorized access to sensitive data, and denial-of-service attacks. These vulnerabilities can be exploited by malicious actors through various vectors, including...