865 matches found
openSUSE 15 Security Update : cargo-packaging, rust-bindgen (SUSE-SU-2025:4091-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:4091-1 advisory. cargo-packaging was updated to version 1.3.0+0: - CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber bsc1249012 Other fixes: - Prevent strippi...
CVE-2025-9227
Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor...
CVE-2025-40176
creationtimestamp| type| source ---|---|--- 2025-11-12 12:00:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gm3cwbw32n 2025-11-12 14:01:47+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsstockzu2 2026-04-02 17:00:00+00:00| seen|...
Apple macOS Sequoia Code Signature Limit Insufficiency Vulnerability
Apple macOS Sequoia is an operating system announced by Apple on June 10, 2024 at the WWDC24 developer conference. Apple macOS Sequoia suffers from an insufficient code signature restriction vulnerability that can be exploited by an attacker to access sensitive user data...
CVE-2025-41340
creationtimestamp| type| source ---|---|--- 2025-11-04 14:05:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4spe7jx4v2a 2025-11-04 15:35:41+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suecmwwxd2...
CVE-2025-64110
creationtimestamp| type| source ---|---|--- 2025-11-04 12:39:54+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m4skkioyf22o 2025-11-05 02:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4txg66yw62s 2025-11-05 03:30:47+00:00| seen|...
CVE-2025-50735
creationtimestamp| type| source ---|---|--- 2025-11-03 20:52:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115487746087659861 2025-11-03 21:36:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qy2z6uql2x...
CVE-2025-12531 IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...
Fedora: Security Advisory (FEDORA-2025-a77c1f005b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-40086
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict other buffer objects BOs within the same VM under certain conditions, which may lead to NULL pointer dereferences late...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in python3-pip-wheel python3.12-pip python3.12-pip-wheel urllib3
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in python3-pip-wheel python3.12-pip python3.12-pip-wheel urllib3 Vulnerability Details CVEID:CVE-2025-50182 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Starting in version...
CVE-2025-62902
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeHunk WP Popup Builder wp-popup-builder allows Retrieve Embedded Sensitive Data.This issue affects WP Popup Builder: from n/a through = 1.3.8...
Security update for cmake
This update for cmake fixes the following issues: CVE-2025-9301: Fixed assertion failure due to improper validation bsc1248461 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...
CVE-2025-50950
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
CVE-2025-11866
creationtimestamp| type| source ---|---|--- 2025-10-22 08:43:34+00:00| seen| Telegram/EX2LHB4HrGv-ZI8Q0F0bprYlpRim0c5v8ijnOC8FxHvGFg0...
CVE-2025-53071
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Upload Attachments. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2025-53059
CVE-2025-53059 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools (OpenSearch Dashboards) with affected versions 8.60, 8.61, 8.62. The flaw enables a high-privileged attacker with network access via HTTP to compromise PeopleSoft PeopleTools and potentially obtain unauthorized access to ...
`tokio-tar` parses PAX extended headers incorrectly, allows file smuggling
The archive reader incorrectly handles PAX extended headers, when the ustar header incorrectly specifies zero size size=000000000000, while a PAX header specifies a non-zero size, tokio-tar::Archive is going to read the file content as tar entry header. This can be used by a tar file to present...
