Lucene search
+L

40247 matches found

Android Security Bulletins
Android Security Bulletins
added 2025/04/07 12:00 a.m.43 views

Android Security Bulletin—April 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-04-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

9.8CVSS8.4AI score0.03558EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/04/07 12:00 a.m.19 views

Photon OS 5.0: Linux PHSA-2025-5.0-0493

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0493. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.8CVSS6.7AI score0.00873EPSS
SaveExploits3References35
Tenable Nessus
Tenable Nessus
added 2025/04/07 12:00 a.m.32 views

Oracle Linux 8 : libxslt (ELSA-2025-3615)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3615 advisory. - Fix CVE-2024-55549 RHEL-83506 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

7.8CVSS7.1AI score0.00351EPSS
SaveExploits4References3
Snyk
Snyk
added 2025/04/06 3:44 a.m.9 views

Incorrect Synchronization

Overview Affected versions of this package are vulnerable to Incorrect Synchronization in the checkCertId function, when processing multiple concurrent updates to a node's configuration, which can cause a panic. Remediation Upgrade chainmaker.org/chainmaker/net-libp2p/libp2pnet to version 1.2.7 o...

8.2CVSS7AI score0.00255EPSS
SaveExploits0References2
CVE
CVE
added 2025/04/06 12:00 a.m.58 views

CVE-2024-58132

CVE-2024-58132 affects chainmaker-go (ChainMaker) up to version 2.3.6, where multiple configuration updates on a single node can trigger concurrent reads/writes on a map, causing a panic. Public sources corroborate the issue across multiple catalogs (NVD/Red Hat/CIRCL), with the root cause descri...

4CVSS6.9AI score0.00255EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/06 12:00 a.m.8 views

CVE-2024-58132

In chainmaker-go aka ChainMaker before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic...

4CVSS6.8AI score0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/06 12:00 a.m.11 views

chainMaker 安全漏洞

chainMaker is a Go library from Go Open Source. A security vulnerability exists in chainMaker versions prior to 2.3.6, which stems from the fact that multiple updates to the configuration may cause concurrent read and write operations to trigger a panic...

4CVSS6.8AI score0.00255EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/06 12:00 a.m.26 views

CVE-2024-58132

In chainmaker-go aka ChainMaker before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic...

4CVSS0.00255EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/05 6:46 p.m.26 views

MGASA-2025-0126 Updated thunderbird packages fix security vulnerabilities

Use-after-free triggered by XSLTProcessor. CVE-2025-3028 URL Bar Spoofing via non-BMP Unicode characters. CVE-2025-3029 Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. CVE-2025-3030...

8.1CVSS8.6AI score0.00855EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/04/05 2:28 p.m.8 views

CVE-2025-30616

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Wood Latest Custom Post Type Updates latest-custom-post-type-updates allows Reflected XSS.This issue affects Latest Custom Post Type Updates: from n/a through = 1.3.0...

7.1CVSS7.2AI score0.00288EPSS
SaveExploits0References1
Fedora
Fedora
added 2025/04/05 1:27 a.m.17 views

[SECURITY] Fedora 41 Update: exim-4.98.2-1.fc41

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

8.1CVSS8.1AI score0.00524EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/04/05 12:00 a.m.6 views

PT-2025-17209

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.13.7 and earlier, libxml2 versions 2.14.x before 2.14.2 Description The issue is related to a heap-based buffer under-read in the xmlSchemaIDCFillNodeTables function in xmlschemas.c. This can be exploited by validating a...

7.5CVSS7.4AI score0.00601EPSS
SaveExploits2References104
OPENSUSE Linux
OPENSUSE Linux
added 2025/04/05 12:00 a.m.12 views

govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media Announcement ID: openSUSE-SU-2025:14970-1 Rating: moderate Cross-References: CVE-2025-0312 CVE-2025-23391 CVE-2025-29072 CVE-2025-29868 CVE-2025-30223 CVE-2025-31135 CVSS scores: CVE-2025-23391 SUSE : 9.1...

9.1CVSS7.4AI score0.00937EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2025/04/05 12:00 a.m.27 views

RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.62 (RHSA-2025:3452)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3452 advisory. Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP...

9.1CVSS7.8AI score0.05582EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2025/04/05 12:00 a.m.18 views

SUSE SLES15 / openSUSE 15 Security Update : google-guest-agent (SUSE-SU-2025:1143-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1143-1 advisory. - CVE-2024-45337: golang.org/x/crypto/ssh: Fixed misuse of ServerConfig.PublicKeyCallback leading to authorization bypass...

9.1CVSS7.6AI score0.03153EPSS
SaveExploits2References6
OSV
OSV
added 2025/04/04 1:31 p.m.5 views

SUSE-SU-2025:1143-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Fixed misuse of ServerConfig.PublicKeyCallback leading to authorization bypass bsc1234563. Other fixes: - Updated to version 20250327.01 bsc1239763, bsc1239866 Remove error messages from...

9.1CVSS9.6AI score0.03153EPSS
SaveExploits2References5
OSV
OSV
added 2025/04/04 12:00 a.m.8 views

OPENSUSE-SU-2025:14968-1 cyradm-3.8.4-1.1 on GA media

These are all security issues fixed in the cyradm-3.8.4-1.1 package on the GA media of openSUSE Tumbleweed...

9.8CVSS9.7AI score0.07622EPSS
SaveExploits0References4
Spring Security Advisories
Spring Security Advisories
added 2025/04/04 12:00 a.m.23 views

Using Spring AI 1.0.0-SNAPSHOT: Part 2 - Important Changes and Updates

Using Spring AI 1.0.0-SNAPSHOT: Part 2 - Important Changes and Updates This blog post is a continuation of our previous article Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates, where we introduced the significant changes to artifact IDs, dependency management, and autoconfiguration ...

7.1AI score
SaveExploits0
Apple
Apple
added 2025/04/04 12:00 a.m.124 views

About the security content of AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, and CarPlay Communication Plug-in R18.1 Updates

About the security content of AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, and CarPlay Communication Plug-in R18.1 Updates This document is intended for developers of accessories or software compatible with Apple devices. These updates are available for members of the Apple MFi Program...

6.5CVSS9.2AI score0.03151EPSS
SaveExploits4References1Affected Software1
OSV
OSV
added 2025/04/04 12:00 a.m.7 views

OPENSUSE-SU-2025:14966-1 MozillaThunderbird-128.9.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

8.1CVSS7.4AI score0.00855EPSS
SaveExploits1References4
Rows per page
Query Builder