30171 matches found
OPENSUSE-SU-2025:15500-1 chromedriver-139.0.7258.154-1.1 on GA media
These are all security issues fixed in the chromedriver-139.0.7258.154-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2020-13346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential...
Linux Distros Unpatched Vulnerability : CVE-2021-22256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status...
Linux Distros Unpatched Vulnerability : CVE-2021-30164
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the addissuenotes permission requirement by leveraging the Issues API. CVE-2021-30164 Not...
Linux Distros Unpatched Vulnerability : CVE-2023-5117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues...
OPENSUSE-SU-2025:15496-1 python311-h2-4.3.0-1.1 on GA media
These are all security issues fixed in the python311-h2-4.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
Secrets Found. Owners Identified. Issues Fixed.
Wiz closes the loop on exposed secrets with blast radius context, ownership intelligence, and actionable, AI-powered fixes...
Linux Distros Unpatched Vulnerability : CVE-2019-11548
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to...
SUSE-SU-2025:02970-1 Security update for pam
This update for pam fixes the following issues: - Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234...
OPENSUSE-SU-2025:15491-1 ucode-intel-20250812-1.1 on GA media
These are all security issues fixed in the ucode-intel-20250812-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-57768
Phproject is a high performance full-featured project management system. From 1.8.0 to before 1.8.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Planned Hours field when creating a new project. When sending a POST request to /issues/new/, the value provided in the Planned Hours...
K000153130: libxml2 vulnerabilities CVE-2025-49794, CVE-2025-49795, and CVE-2025-49796
Security Advisory Description CVE-2025-49794 A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as...
OPENSUSE-SU-2025:15482-1 jetty-annotations-9.4.58-1.1 on GA media
These are all security issues fixed in the jetty-annotations-9.4.58-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15481-1 chromedriver-139.0.7258.138-1.1 on GA media
These are all security issues fixed in the chromedriver-139.0.7258.138-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-57768
Phproject (versions 1.8.0–1.8.2; fixed in 1.8.3) contains a Stored XSS in the Planned Hours field during project creation. A POST to /issues/new/ echoes the planned_hours value in the HTML without encoding/sanitization, allowing a attacker-supplied payload (e.g., ) to execute in the browser. The ...
May 13, 2025—KB5058392 (OS Build 17763.7314)
None None...
May 13, 2025—KB5058411 (OS Build 26100.4061)
None None...
May 13, 2025—KB5058405 (OS Builds 22621.5335 and 22631.5335)
None None...