40256 matches found
CVE-2025-27139
CVE-2025-27139 affects Combodo iTop (web-based IT service management). The vulnerability is a cross-site scripting issue on the preferences page. Affected versions are earlier than 2.7.12, 3.1.2, and 3.2.0. The issue is mitigated by upgrading to the fixed releases: 2.7.12, 3.1.2, or 3.2.0. No exp...
CVE-2025-27139 Combodo iTop vulnerable to stored self Cross-site Scripting in preferences
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cross-site scripting when the preferences page is opened. Versions 2.7.12, 3.1.2, and 3.2.0 fix the issue...
MGASA-2025-0073 Updated libxml2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Use-after-free in xmlSchemaIDCFillNodeTables. CVE-2024-56171 Stack-buffer-overflow in xmlSnprintfElements. CVE-2025-24928 Null-deref in xmlPatMatch. CVE-2025-27113...
Updated libxml2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Use-after-free in xmlSchemaIDCFillNodeTables. CVE-2024-56171 Stack-buffer-overflow in xmlSnprintfElements. CVE-2025-24928 Null-deref in xmlPatMatch. CVE-2025-27113...
CVE-2025-26600
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...
GHSA-57CQ-JGQ2-X7VG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QWVH-X5GW-88V2 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-P9VW-XW86-3F2W vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
GHSA-P87X-PPH3-GHM8 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-RHF6-X9HH-7359 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-MJVJ-G3G8-7G76 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-3625-3V8Q-96PC vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-89PP-7JPJ-HXXF vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-3GX9-7V2H-VCXW vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-Q4QV-28J2-P7M2 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-3W77-J752-V9MG vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9...
GHSA-RR6R-CFGF-GC6H vulnerabilities
Vulnerabilities for packages: direnv, dockerize, kwok, helm-operator-fips, sonobuoy, s5cmd, fq, nri-discovery-kubernetes, etcd, controller-gen, gomplate, govulncheck, kustomize, gh, kube-rbac-proxy-fips, docker-credential-ecr-login, capslock, memcached-exporter, nri-apache, temporal-server,...
CGA-XPGR-WJ46-H3FX
Bulletin has no description...
USN-7267-2: libsndfile vulnerability
USN-7267-1 fixed a vulnerability in libsndfile. This update provides the corresponding updates for Ubuntu 24.04 LTS and Ubuntu 24.10. Original advisory details: It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to...