38154 matches found
kernel: wifi: cfg80211: fix use-after-free in cmp_bss()
A use after free vulnerbility exists in the linux kernel wifi module in the cmpbss function,an attacker could create a crafted payload to trigger, leading to damage availability and integrity of the system...
OPENSUSE-SU-2025:15724-1 trivy-0.67.2-1.1 on GA media
These are all security issues fixed in the trivy-0.67.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15723-1 regclient-0.10.0-1.1 on GA media
These are all security issues fixed in the regclient-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15721-1 incus-6.17-2.1 on GA media
These are all security issues fixed in the incus-6.17-2.1 package on the GA media of openSUSE Tumbleweed...
xen-4.20.1_08-1.1 on GA media (moderate)
xen-4.20.108-1.1 on GA media Announcement ID: openSUSE-SU-2025:15719-1 Rating: moderate Cross-References: CVE-2025-58149 CVSS scores: CVE-2025-58149 SUSE : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2025-58149 SUSE : 4.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N...
tomcat11-11.0.13-1.1 on GA media (moderate)
tomcat11-11.0.13-1.1 on GA media Announcement ID: openSUSE-SU-2025:15718-1 Rating: moderate Cross-References: CVE-2025-55752 CVE-2025-55754 CVE-2025-61795 CVSS scores: CVE-2025-55752 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-55752 SUSE : 7.7...
OPENSUSE-SU-2025:15720-1 chromedriver-142.0.7444.134-1.1 on GA media
These are all security issues fixed in the chromedriver-142.0.7444.134-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-64481
Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...
CVE-2025-63783
A Broken Object Level Authorization BOLA vulnerability was discovered in the tRPC project mutation APIs update, delete, add/remove tag of the Onlook web application 0.2.32. The vulnerability exists because the API fails to verify the ownership or membership of the currently authenticated user for...
OPENSUSE-SU-2025:15715-1 squid-7.3-1.1 on GA media
These are all security issues fixed in the squid-7.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15719-1 xen-4.20.1_08-1.1 on GA media
These are all security issues fixed in the xen-4.20.108-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15710-1 govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20251105T184115-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15711-1 opentofu-1.10.7-1.1 on GA media
These are all security issues fixed in the opentofu-1.10.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15709-1 google-osconfig-agent-20251028.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20251028.00-1.1 package on the GA media of openSUSE Tumbleweed...
Onlook 安全漏洞
Onlook is a source code visual editing tool from the Onlook open source. A security vulnerability exists in Onlook version 0.2.32, which stems from the API not validating the ownership or membership of the current authenticated user for the requested item ID, potentially resulting in compromised...
kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
A null pointer dereference exists in the linux kernel such that in objstockflushrequired:stock-cachedobjcg can be reset between the check and dereference, resulting in damage to the availability of the system...
OPENSUSE-SU-2025:15706-1 erlang-28.1.1-1.1 on GA media
These are all security issues fixed in the erlang-28.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15705-1 runc-1.3.3-1.1 on GA media
These are all security issues fixed in the runc-1.3.3-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-8558
Insider Threat Management ITM Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents t...