CVE-2025-71146 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71146 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22808

fleetdm/fleet is open source device management software. Prior to versions 4.78.2, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, if Windows MDM is enabled, an unauthenticated attacker can exploit this XSS vulnerability to steal a Fleet administrator's authentication token FLEET::authtoken from localStorage...

CVE-2025-11961 affecting package libpcap for versions less than 1.10.6-1

CVE-2025-11961 affecting package libpcap for versions less than 1.10.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-13912 affecting package mariadb for versions less than 10.6.24-1

CVE-2025-13912 affecting package mariadb for versions less than 10.6.24-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40085 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40085 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40071 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40071 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2

CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

Security Bulletin: There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics

Summary There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite, when used with stand alone Cognos Analytics, where MXCSP is used for integration. A remote attacker could bypass authentication mechanisms and gain unauthorized access to Cognos Analytics...

CVE-2025-38670 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38670 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38539 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38539 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38653 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38653 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-45618 affecting package opensc for versions less than 0.26.1-1

CVE-2024-45618 affecting package opensc for versions less than 0.26.1-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by a remote attack to the root directory which results in a Denial of Service (DoS) condition

Summary IBM Engineering Lifecycle Management could allow an unauthenticated remote attacker to update server configuration files which would allow them to perform unauthorized actions, subsequently leading to a Denial of Service condition. The associated CVE is addressed. Vulnerability Details...

CVE-2025-50077 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50077 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

K000153092: Apache Tomcat vulnerabilities CVE-2025-52520 and CVE-2025-49125

Security Advisory Description CVE-2025-52520 For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42,...

CVE-2025-38368 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38368 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31486

Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31486. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-31486 DESCRIPTION: Vite is a frontend tooling...

GHSA-H2FW-RFH5-95R3 Apache Tomcat - CGI security constraint bypass

Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1...

CVE-2022-23693

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...