Linux Distros Unpatched Vulnerability : CVE-2023-5117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues...

Secrets Found. Owners Identified. Issues Fixed.

Wiz closes the loop on exposed secrets with blast radius context, ownership intelligence, and actionable, AI-powered fixes...

Linux Distros Unpatched Vulnerability : CVE-2019-11548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to...

SUSE-SU-2025:02970-1 Security update for pam

This update for pam fixes the following issues: - Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234...

OPENSUSE-SU-2025:15491-1 ucode-intel-20250812-1.1 on GA media

These are all security issues fixed in the ucode-intel-20250812-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-57768

Phproject is a high performance full-featured project management system. From 1.8.0 to before 1.8.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Planned Hours field when creating a new project. When sending a POST request to /issues/new/, the value provided in the Planned Hours...

K000153130: libxml2 vulnerabilities CVE-2025-49794, CVE-2025-49795, and CVE-2025-49796

Security Advisory Description CVE-2025-49794 A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as...

OPENSUSE-SU-2025:15482-1 jetty-annotations-9.4.58-1.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15481-1 chromedriver-139.0.7258.138-1.1 on GA media

These are all security issues fixed in the chromedriver-139.0.7258.138-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-57768

Phproject (versions 1.8.0–1.8.2; fixed in 1.8.3) contains a Stored XSS in the Planned Hours field during project creation. A POST to /issues/new/ echoes the planned_hours value in the HTML without encoding/sanitization, allowing a attacker-supplied payload (e.g., ) to execute in the browser. The ...

May 13, 2025—KB5058411 (OS Build 26100.4061)

None None...

May 13, 2025—KB5058392 (OS Build 17763.7314)

None None...

May 13, 2025—KB5058383 (OS Build 14393.8066)

None None...

May 13, 2025—KB5058405 (OS Builds 22621.5335 and 22631.5335)

None None...

May 13, 2025—KB5058387 (OS Build 10240.21014)

None None...

OPENSUSE-SU-2025:15479-1 ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15472-1 MozillaThunderbird-140.2.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-34267 · Phproject · Phproject

Name of the Vulnerable Software and Affected Versions: Phproject versions 1.8.0 through 1.8.2 Description: Phproject is a high performance full-featured project management system. A Stored Cross-Site Scripting XSS vulnerability exists in the Planned Hours field when creating a new project. A...

USN-7707-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffmedian tool. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. CVE-2025-8176 It was discovered that LibTIFF did...

libvpx: Integer overflow in vpx_img_alloc()

A flaw was found in libvpx. When creating images, libvpx trusts the width, height, and alignment of the user input. However, it does not properly validate the provided values. This flaw allows an attacker to craft user inputs or trick the user into opening crafted files, where these types of valu...