Security update for buildah

This update for buildah fixes the following issues: CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237681 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for buildah

This update for buildah fixes the following issues: CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237681 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

DEBIAN-CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2024-7872

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data. This issue affects Extreme XDS: before 3933...

CVE-2024-7872

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data. This issue affects Extreme XDS: before 3933...

CVE-2024-7872

CVE-2024-7872 describes an information exposure in ExtremePACS Extreme XDS prior to version 3933, where insertion of sensitive data into sent data could allow retrieval of embedded sensitive information. Affected product: Extreme XDS (ExtremePACS). Underlying issue: data handling that permits emb...

PT-2025-9915

Name of the Vulnerable Software and Affected Versions Extreme XDS versions prior to 3933 Description The issue allows for the insertion of sensitive information into sent data, enabling the retrieval of embedded sensitive data. Recommendations For versions prior to 3933, update to version 3933 or...

CVE-2024-7872: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data. This issue affects Extreme XDS: before 3933...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-9296373...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: OSV:GHSA-93QR-H8PR-4593...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: GHSA-93QR-H8PR-4593...

Embedded Malicious Code

Overview cdn-icon-fetcher-help is a Malicious package. Affected versions of this package are vulnerable to Embedded Malicious Code. Once this package is installed and executed, it downloads a Javascript file from a cdn-static-seven.vercel.app URL, which appears to be an image hosting site. Howeve...

Embedded Malicious Code

Overview cdn-icon-fetch is a Malicious package. Affected versions of this package are vulnerable to Embedded Malicious Code. Once this package is installed and executed, it downloads a Javascript file from a cdn-static-server.vercel.app URL, which appears to be an image hosting site. However, by...

CVE-2025-1080

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

Linux Distros Unpatched Vulnerability : CVE-2022-29078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ejs aka Embedded JavaScript templates package 3.1.6 for Node.js allows server-side template injection in settingsview optionsoutputFunctionName. This is...

Linux Distros Unpatched Vulnerability : CVE-2018-3149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u201,...

Linux Distros Unpatched Vulnerability : CVE-2017-3526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u141,...

Linux Distros Unpatched Vulnerability : CVE-2017-3511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u131 a...

Linux Distros Unpatched Vulnerability : CVE-2018-2641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161,...

Linux Distros Unpatched Vulnerability : CVE-2018-2633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u171,...