30177 matches found
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock: Keep the binding until socket destruction CVE-2025-21756 kernel: dm-flakey: Fix memory corruption in optional corruptbiobyte feature CVE-2025-21966 kernel: net: ppp: Add bound...
CVE-2025-31065
Missing Authorization vulnerability in themeton Rozario allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rozario: from n/a through 1.4...
CVE-2025-4169
The Posts per Cat Unmaintained plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ppc' shortcode in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-8493
The Events Calendar WordPress plugin before 6.6.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2025-47580
Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through = 3.2.35...
Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2025-136-01)
The version of mozilla-thunderbird installed on the remote host is prior to 128.10.1esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-136-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...
OPENSUSE-SU-2025:15127-1 ruby3.4-rubygem-sprockets-4.2.1-1.7 on GA media
These are all security issues fixed in the ruby3.4-rubygem-sprockets-4.2.1-1.7 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15118-1 ruby3.4-rubygem-json_pure-2.7.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-jsonpure-2.7.6-1.3 package on the GA media of openSUSE Tumbleweed...
EulerOS Virtualization 2.12.0 : curl (EulerOS-SA-2025-1568)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server...
OPENSUSE-SU-2025:15103-1 python311-pyspnego-0.11.2-1.4 on GA media
These are all security issues fixed in the python311-pyspnego-0.11.2-1.4 package on the GA media of openSUSE Tumbleweed...
EulerOS Virtualization 2.12.0 : openssl (EulerOS-SA-2025-1565)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...
OPENSUSE-SU-2025:15112-1 ruby3.4-rubygem-activerecord-7.0-7.0.8.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-activerecord-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed...
Security Vulnerabilities fixed in Firefox 138.0.4 — Mozilla
An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...
OPENSUSE-SU-2025:15119-1 ruby3.4-rubygem-kramdown-2.4.0-1.15 on GA media
These are all security issues fixed in the ruby3.4-rubygem-kramdown-2.4.0-1.15 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15094-1 python311-cramjam-2.9.1-1.3 on GA media
These are all security issues fixed in the python311-cramjam-2.9.1-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15101-1 python311-py7zr-0.20.8-2.6 on GA media
These are all security issues fixed in the python311-py7zr-0.20.8-2.6 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15099-1 python311-nltk-3.9.1-2.4 on GA media
These are all security issues fixed in the python311-nltk-3.9.1-2.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15098-1 python311-mechanize-0.4.10-1.4 on GA media
These are all security issues fixed in the python311-mechanize-0.4.10-1.4 package on the GA media of openSUSE Tumbleweed...