13865 matches found
PT-2025-51763
Name of the Vulnerable Software and Affected Versions FileMaker Server versions prior to 22.0.4 Description The FileMaker Server software is susceptible to an issue related to IIS short filename enumeration. Attackers can potentially discover hidden files and directories by leveraging the tilde...
CLSA-2025-1765824979 go-rpm-macros: Fix of CVE-2025-47906
Rebuild with golang = 1.22.9-1.el92.tuxcare.els2 to address CVE-2025-47906...
CVE-2025-67779
A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...
CVE-2025-43542
This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Tahoe 26.2, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime...
UBUNTU-CVE-2025-40345
In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...
OESA-2025-2811 libvirt security update
Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was discovered in libvirt in the XML file processing. More specifically, t...
RHSA-2025:23139 Red Hat Security Advisory: libsoup3 security update
Bulletin has no description...
RHSA-2025:23137 Red Hat Security Advisory: mysql:8.4 security update
Bulletin has no description...
CVE-2025-67508
gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non‑POSIX shells such as Fish and PowerShell, versions 2.11.0 and below of gardenctl allow an attacker with administrative privileges for a Gardener project to craft...
Security update for binutils (important)
openSUSE security update: security update for binutils ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20150-1 Rating: important References: bsc1236632 bsc1236976 bsc1236977 bsc1236978 bsc1236999 bsc1237000 bsc1237001 bsc1237003 bsc1237005 bsc123701...
CLSA-2025-1765476676 cups: Fix of CVE-2025-58364
CVE-2025-58364: fix unsafe deserialization and validation of printer attributes causing null dereference...
RHSA-2025:23088 Red Hat Security Advisory: grafana security update
Bulletin has no description...
Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2024-50393)
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and...
openSUSE Security Advisory (SUSE-SU-2025:4323-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2023-53795
In the Linux kernel, the following vulnerability has been resolved: iommufd: IOMMUFDDESTROY should not increase the refcount syzkaller found a race where IOMMUFDDESTROY increments the refcount: obj = iommufdgetobjectucmd-ictx, cmd-id, IOMMUFDOBJANY; if ISERRobj return PTRERRobj;...
RHEL 9 : kernel-rt (RHSA-2025:22995)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22995 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...
Debian dla-4399 : gir1.2-javascriptcoregtk-4.0 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4399 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4399-1 [email protected]...
CVE-2025-64499
Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API...
EUVD-2023-60139
In the Linux kernel, the following vulnerability has been resolved: bpf: bpfskstorage: Fix invalid wait context lockdep report './testprogs -t testlocalstorage' reported a splat: 27.137569 ============================= 27.138122 BUG: Invalid wait context 27.138650 6.5.0-03980-gd11ae1b16b0a 247...