CVE-2024-51953

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to create a stored crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required...

AZL-57707 CVE-2025-0684 affecting package grub2 for versions less than 2.06-25

A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesyste...

AZL-57974 CVE-2024-58020 affecting package kernel for versions less than 6.6.79.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mtinputconfigured devmkasprintf can return a NULL pointer on failure,but this returned value in mtinputconfigured is not checked. Add NULL check in mtinputconfigured, to handle kernel NULL point...

CVE-2025-26603 affecting package vim for versions less than 9.1.0791-4

CVE-2025-26603 affecting package vim for versions less than 9.1.0791-4. A patched version of the package is available...

AZL-57369 CVE-2025-22869 affecting package kubevirt for versions less than 1.2.0-15

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57422 CVE-2025-22868 affecting package packer for versions less than 1.9.5-10

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57315 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57428 CVE-2025-22869 affecting package kubernetes for versions less than 1.28.4-15

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57389 CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-7

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57353 CVE-2025-22869 affecting package gh for versions less than 2.62.0-7

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

SUSE CVE-2025-1414

Memory safety bugs present in Firefox 135. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135.0.1...

AZL-57025 CVE-2025-1118 affecting package grub2 for versions less than 2.06-25

A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory...

AZL-57052 CVE-2024-45775 affecting package grub2 for versions less than 2.06-25

A flaw was found in grub2 where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parseoption function, leading...

AZL-57067 CVE-2024-45774 affecting package grub2 for versions less than 2.06-25

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded...

AZL-57061 CVE-2025-1376 affecting package elfutils for versions less than 0.189-4

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elfstrptr in the library /libelf/elfstrptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The...

CVE-2025-1181 affecting package binutils for versions less than 2.37-12

CVE-2025-1181 affecting package binutils for versions less than 2.37-12. A patched version of the package is available...

AZL-56873 CVE-2025-1352 affecting package elfutils for versions less than 0.189-5

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...

CVE-2023-3978 affecting package kubevirt for versions less than 0.59.0-24

CVE-2023-3978 affecting package kubevirt for versions less than 0.59.0-24. A patched version of the package is available...

CVE-2025-24812

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1212C AC/DC/Rly...

CVE-2024-53648

A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions V9.90, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions V9.90, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions V9.90, SIPROTEC 5 6MD89 CP300 All versions V9.90, SIPROTEC 5...