30178 matches found
Unable to take control during a Teams session with a Linux Workspace
Unable to take control during a Teams session with a Linux Workspace...
PT-2025-20604 · Undefined · Undefined
⚠️ Vulnerability Alert: Multiple vulnerabilities in GL-MT2500 and GL-MT2500A 📅 Timeline: Not provided 🆔 cveId: CVE-2024-57391 📊 baseScore: 7.2 📏 cvssMetrics: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H cvssSeverity: High 🟠 📈 EPSS Percentile: Not available 🛠️...
SUSE SLES15 Security Update : kernel (Live Patch 5 for SLE 15 SP6) (SUSE-SU-2025:1468-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1468-1 advisory. This update for the Linux Kernel 6.4.0-1506002325 fixes several issues. The following security issues were fixed: - CVE-2024-53237: Bluetooth:...
OPENSUSE-SU-2025:15072-1 bird3-3.1.0-1.1 on GA media
These are all security issues fixed in the bird3-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
SUSE-SU-2025:1518-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names bsc1233285 - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soupheaderparseparamliststrict bsc1233292 - CVE-2024-52532: Fixed...
**UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request
In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests...
MGASA-2025-0150 Updated firefox packages fix security vulnerabilities
A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape, CVE-2025-4083. A vulnerability was identified in Firefox...
Updated thunderbird packages fix security vulnerabilities
Process isolation bypass using "javascript:" URI links in cross-origin frames. CVE-2025-4083 Unsafe attribute access during XPath parsing. CVE-2025-4087 Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. CVE-2025-4091 Memory safety bug fixed in...
CVE-2025-43926
An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be used to set user preferences with arbitrary keys. When fetching user data via GetUserData, these keys and values are retrieved and given as a whole to other...
SUSE-SU-2025:1516-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-6119: Fixed denial of service in X.509 name checks bsc1229465 Other fixes: - FIPS: Deny SHA-1 signature verification in FIPS provider bsc1221365. - FIPS: RSA keygen PCT requirements. - FIPS: Check that the fips provider is available...
CVE-2024-45566
Memory corruption during concurrent buffer access due to modification of the reference count...
CVE-2025-37819
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2mgetfwnode With ACPI in place, gicv2mgetfwnode is registered with the pci subsystem as pcimsigetfwnodecb, which may get invoked at runtime during a PCI host bridge probe. But, the...
Azure deployed machines fail to Power On due to Data Collection Rule Associations
When applying a Machine Profile to an Azure-based Machine Creation Services catalog, attempting to Start machines may result in one of the following errors: "code":"UnsupportedFeature","message":"Data Collection Rule Associations is not supported in the location of the targeted parent resource...
Kerberos KNOB stopped working
The KNOB “nsapimgr -ys arg1=1 -ys call=nsenablepreferredkrbetype” no longer works after upgrading from 13.1 to 14.1...
Ubuntu: Security Advisory (USN-7494-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2025:15067-1 ruby3.4-rubygem-rack-2.2-2.2.14-1.1 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.14-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15068-1 sequoia-octopus-librnp-1.11.0-2.1 on GA media
These are all security issues fixed in the sequoia-octopus-librnp-1.11.0-2.1 package on the GA media of openSUSE Tumbleweed...
govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media (moderate)
govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media Announcement ID: openSUSE-SU-2025:15059-1 Rating: moderate Cross-References: CVE-2019-11243 CVE-2023-32198 CVE-2024-22031 CVE-2025-23390 CVE-2025-32777 CVE-2025-3879 CVE-2025-4166 CVE-2025-4210 CVE-2025-46327 CVE-2025-46342 CVE-2025-46569...