USN-7519-1: MariaDB vulnerabilities

Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...

CVE-2025-30383

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

USN-7484-1 openjdk-24 vulnerabilities

Alicja Kario discovered that the JSSE component of OpenJDK 24 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. CVE-2025-21587 It was discovered that the Compiler component of OpenJDK 24 incorrectly handled compiler transformations. An...

USN-7480-1 openjdk-8 vulnerabilities

Alicja Kario discovered that the JSSE component of OpenJDK 8 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. CVE-2025-21587 It was discovered that the Compiler component of OpenJDK 8 incorrectly handled compiler transformations. An...

USN-7376-1 mariadb vulnerability

A security issue was discovered in MariaDB and this update includes a new upstream MariaDB version to fix the issue. In addition to security fixes, the updated packages contain bug and regression fixes, new features, and possibly incompatible changes...

Error: "Cannot find the object on the mount host."

Challenge When attempting to perform a Guest Files restore from Veeam Backup Enterprise Manager, the restore fails with the error: Cannot find the object on the mount host. Read KB4722 for more details. Cause This error occurs when the Guest OS partition that is being mounted is formatted with a...

CVE-2025-24316 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies

The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality...

[SECURITY] Fedora 40 Update: python3.9-3.9.21-4.fc40

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

The vulnerability of the Drupal Security Kit module in the Drupal CMS system allows attackers to trigger a service failure.

The vulnerability of the Drupal Security Kit CMS system’s module is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the insufficient protection of sensitive data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools stems from insufficient protection of operational data due to the use of incompatible policies. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected informati...

PT-2024-17419 · Pcvue Web · Pcvue Web

Name of the Vulnerable Software and Affected Versions: PcVue Web affected versions not specified Description: The issue occurs when a user attempts to authenticate using an incompatible Web client version with the PcVue Web back end, resulting in user credentials login and password being inserted...

PcVue 安全漏洞

PcVue is a reliable, secure, and powerful operational software platform from PcVue, Inc. dedicated to monitoring and controlling applications in markets such as building and campus management. A security vulnerability exists in PcVue that stems from user credentials login and password being...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : MySQL vulnerabilities (USN-7102-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7102-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issue...

AZL-52216 CVE-2024-51744 affecting package etcd for versions less than 3.5.18-1

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52236 CVE-2024-51744 affecting package etcd for versions less than 3.5.21-1

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52213 CVE-2024-51744 affecting package jx for versions less than 3.10.182-1

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

Repository upgrade error: "Some of the data in this repository is incompatible with the immutability settings."

Solution Requires Data Deletion The resolution procedure of this article involves the directed deletion of backup data that should not have been migrated to the immutable repository. Please review all details of the article closely, and contact Veeam Support if you would like assistance. Challeng...

CVE-2024-7825

CVE-2024-7825 affects Webroot SecureAnywhere - Web Shield, specifically the wrUrl.Dll modules, and is a Type Confusion vulnerability. The issue exists in Web Shield versions prior to 2.1.2.3 and can cause functionality misuse, with the CVE noting that it can crash the WRSA.exe service and generat...

CVE-2023-3441 Exposure of Sensitive Information Due to Incompatible Policies in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources through incompatible types. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information throug...