SUSE SLES15 Security Update : kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:0731-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0731-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: ...

postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...

CVE-2025-47969

Exposure of sensitive information to an unauthorized actor in Windows Hello allows an authorized attacker to disclose information locally...

CVE-2023-33515

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting XSS via query screens...

CVE-2025-32915 Sensitive data exposed during automatic agent updates

Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk 2.4.0p1, 2.3.0p32, 2.2.0p42 and = 2.1.0p49 EOL. This allows a local attacker to read sensitive data...

CVE-2025-46747 Exposure of Sensitive System Information

An authenticated user without user-management permissions could identify other user accounts...

CVE-2025-23174 Yoel Geva - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-4990

creationtimestamp| type| source ---|---|--- 2025-04-10 03:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmglg4gkjf2g 2025-04-10 06:59:54+00:00| exploited| https://t.me/cvedetector/22621 2025-04-10 14:06:26+00:00| seen|...

CVE-2024-52966

CVE-2024-52966 affects Fortinet FortiAnalyzer versions 6.4.0 through 7.6.0. The underlying issue is an information-disclosure via filter manipulation in the Log View component, allowing an unauthorized actor to read event logs from another domain. Impact is information disclosure; no exploitation...