USN-7402-5: Linux kernel (GCP) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - GPU drivers; - HID subsystem; - Media drivers; - JFS file system; - Network namespace; -...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.10 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.10 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

USN-7444-1: Synapse vulnerabilities

It was discovered that Synapse network policies could be bypassed via specially crafted URLs. An attacker could possibly use this issue to bypass authentication mechanisms. CVE-2023-32683 It was discovered that Synapse exposed cached device information. An attacker could possibly use this issue t...

USN-7444-1 matrix-synapse vulnerabilities

It was discovered that Synapse network policies could be bypassed via specially crafted URLs. An attacker could possibly use this issue to bypass authentication mechanisms. CVE-2023-32683 It was discovered that Synapse exposed cached device information. An attacker could possibly use this issue t...

Security update for iperf

This update for iperf fixes the following issues: Update to 3.18 bsc1234705, CVE-2024-53580: SECURITY NOTE: Thanks to Leonid Krolle Bi.Zone for discovering a JSON type security vulnerability that caused a segmentation fault in the server. CVE-2024-53580 This has now been fixed. PR1810 UDP packets...

CVE-2025-2092 Remote site authentication secrets written to web log

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

WordPress Custom Related Posts plugin <= 1.7.4 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Custom Related Posts versions = 1.7.4...

Microsoft Entra ID Lockouts After MACE App Flags Legit Users

Was your Microsoft Entra ID account locked? Find out about the recent widespread lockouts caused by the new…...

CVE-2025-46244

CVE-2025-46244: Missing Authorization in WordPress plugin Advanced Linked Variations for Woocommerce (versions

ManageWiki 授权问题漏洞

ManageWiki is an open source extension for Miraheze. A license issue vulnerability exists in ManageWiki, which stems from improper extension management and could result in restricted extensions being automatically disabled...

TOTOLINK A3700R Access Control Error Vulnerability (CNVD-2025-12019)

The TOTOLINK A3700R is a wireless router that provides network connectivity for homes and small offices. The TOTOLINK A3700R suffers from an Access Control Error vulnerability that originates from improper access control of the setDdnsCfg function in the /cgi-bin/cstecgi.cgi file. No detailed...

OPENSUSE-SU-2025:15013-1 gopass-1.15.16-1.1 on GA media

These are all security issues fixed in the gopass-1.15.16-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15011-1 epiphany-48.1-1.1 on GA media

These are all security issues fixed in the epiphany-48.1-1.1 package on the GA media of openSUSE Tumbleweed...

Printers intermittently shows Access denied, Unable to connect

Customer has moved from 7.15 to DAAS with WEM on cloud, Since then they are facing issues with printers intermittently 2. Issue is occurring with all the users Admins and non Admins 3. Issue got auto resolved post 15-20 minutes and sometimes users need to close the application and they able to...

OPENSUSE-SU-2025:15016-1 mcabber-1.1.2-1.1 on GA media

These are all security issues fixed in the mcabber-1.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15014-1 govulncheck-vulndb-0.0.20250422T152923-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250422T152923-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15012-1 ffmpeg-6-6.1.2-4.1 on GA media

These are all security issues fixed in the ffmpeg-6-6.1.2-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15015-1 libsoup-3_0-0-3.6.5-2.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.5-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-17533 · Crocoblock · Jetelements For Elementor

Name of the Vulnerable Software and Affected Versions: JetElements For Elementor versions 2.7.4.1 and earlier Description: The issue is related to missing authorization, allowing access to functionality not properly constrained by Access Control Lists ACLs. This could potentially lead to...

Amazon Linux AMI : libxslt (ALAS-2025-1968)

The version of libxslt installed on the remote host is prior to 1.1.28-6.16. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1968 advisory. xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...