PT-2025-32603 · Sap · Sap Fiori

Name of the Vulnerable Software and Affected Versions: SAP Fiori Launchpad affected versions not specified Description: SAP Fiori Launchpad is susceptible to a Reverse Tabnabbing issue stemming from insufficient external navigation protection for its link elements . An attacker with administrativ...

PT-2025-32671 · American Megatrends · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: APTIOV BIOS contains a vulnerability where a skilled user with local access may cause a “Race Condition”. Successful exploitation may lead to resource exhaustion, impacting confidentiality,...

OPENSUSE-SU-2025:15433-1 framework-inputmodule-control-0.2.0-3.1 on GA media

These are all security issues fixed in the framework-inputmodule-control-0.2.0-3.1 package on the GA media of openSUSE Tumbleweed...

WordPress RT Easy Builder plugin <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin RT Easy Builder – Advanced addons for Elementor versions = 2.3...

BIT-LIBPYTHON-2021-3737

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability...

BIT-LIBPYTHON-2021-3733

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client such as web browser connects to, could trigger a Regular Expression Denial of Service ReDOS during an authentication request with a specially crafted payload that is sen...

BIT-LIBPYTHON-2020-10735

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int"text", a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits float, decimal, int.frombytes, and int for binary bases 2, 4, 8, 16, and 32 are no...

The vulnerability of the skia module in the HarmonyOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the skia module in the HarmonyOS operating system is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the br_multicast_port_ctx_init() function in the net/bridge/br_multicast.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the brmulticastportctxinit function in the net/bridge/brmulticast.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2020-25661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw...

ffmpeg-4-4.4.6-5.1 on GA media (moderate)

ffmpeg-4-4.4.6-5.1 on GA media Announcement ID: openSUSE-SU-2025:15427-1 Rating: moderate Cross-References: CVE-2025-7700 CVSS scores: CVE-2025-7700 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-7700 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

Linux Distros Unpatched Vulnerability : CVE-2021-3760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availabilit...

Linux Distros Unpatched Vulnerability : CVE-2025-22125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt...

Linux Distros Unpatched Vulnerability : CVE-2021-20288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHXGETAUTHSESSIONKEY requests, it doesn't sanitize otherkeys,...

CVE-2025-54788

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. In versions and below, the InboundEmail module allows the arbitrary execution of queries in the backend database, leading to SQL injection. This can have wide-reaching implications on...

govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media Announcement ID: openSUSE-SU-2025:15424-1 Rating: moderate Cross-References: CVE-2015-7561 CVE-2016-9962 CVE-2017-1000056 CVE-2017-1002102 CVE-2018-1002100 CVE-2018-1002101 CVE-2018-16733 CVE-2018-19184 CVE-2019-1002100 CVE-2019-1002101...

Linux Distros Unpatched Vulnerability : CVE-2021-3506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure...

chromedriver-139.0.7258.66-1.1 on GA media (moderate)

chromedriver-139.0.7258.66-1.1 on GA media Announcement ID: openSUSE-SU-2025:15421-1 Rating: moderate Cross-References: CVE-2025-54874 CVE-2025-8576 CVE-2025-8577 CVE-2025-8578 CVE-2025-8579 CVE-2025-8580 CVE-2025-8581 CVE-2025-8582 CVE-2025-8583 CVSS scores: CVE-2025-54874 SUSE : 7...

OPENSUSE-SU-2025:15427-1 ffmpeg-4-4.4.6-5.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-5.1 package on the GA media of openSUSE Tumbleweed...

OESA-2025-1991 jakarta-mail security update

The Jakarta Mail API provides a platform-independent and protocol-independent framework to build mail and messaging applications. Security Fixes: A vulnerability has been found in Eclipse Jakarta Mail 2.2 and classified as problematic.The CWE definition for the vulnerability is CWE-147. The produ...