PT-2025-18551 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free bug has been identified in the nilfs2 filesystem. This issue occurs when a nilfs2 filesystem is downgraded to read-only due to metadata corruption on disk and is...

PT-2025-18782 · Undefined · Undefined

@CISAgov 2/8 🏭 Revolution Pi vulnerability details: The industrial IoT platform has THREE critical flaws CVE-2025-24522, CVE-2025-24523, CVE-2025-24524 with CVSS scores up to 10.0! These affect Node-RED and PiCtory components widely used in manufacturing, energy, and water sectors...

Mozilla Thunderbird < 128.10

The version of Thunderbird installed on the remote Windows host is prior to 128.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-32 advisory. - Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory...

CVE-2025-32884

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages...

Amazon Linux 2 : docker (ALASECS-2025-054)

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-054 advisory. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

Citrix App Layering 2503: Elastic Layer Assignments Load Older Layer Version After ELM Upgrade

After upgrading the Enterprise Layer Manager ELM to version 2503, users continue to receive older versions of elastic layers on their virtual desktops, even after the elastic layer assignments have been updated to newer versions. Additional symptoms observed: New versions of App Layers are create...

CVE-2025-46634

The CVE-2025-46634 issue affects the Tenda RX2 Pro web management portal (firmware 16.03.30.14). The underlying problem is that the portal transmits the user’s password hash in cleartext before encryption is established, allowing an unauthenticated attacker to observe credentials and replay the h...

Debian dla-4149 : nagvis - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4149 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4149-1 [email protected]...

Debian dla-4152 : libnode-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4152 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4152-1 [email protected] https://www.debian.org/lts/security/...

Mozilla Thunderbird < 128.10

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-32 advisory. - Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memo...

Amazon Linux 2 : nss-softokn (ALAS-2025-2835)

The version of nss-softokn installed on the remote host is prior to 3.67.0-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2835 advisory. new tlsfuzzer code can still detect timing issues in RSA operations CVE-2023-4421 Tenable has extracted the preceding...

[SECURITY] [DSA 5910-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5910-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 30, 2025 https://www.debian.org/security/faq -...

CVE-2023-37517

The CVE-2023-37517 entry concerns HCL Leap (and Domino Leap per CVE context) with a missing no-cache header, allowing sensitive data to be cached. Root cause stated is absence of cache-control/no-cache headers, leading to potential exposure of confidential data. Connected sources confirm affected...

SUSE-SU-2025:1422-1 Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059161 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE bsc1240840. - CVE-2023-52885: SUNRPC: Fix UAF in svctcplistendataready bsc1227753. - CVE-2024-50205: ALSA...

CVE-2025-32971 XWiki Solr script service doesn't take dropped programming right into account

XWiki is a generic wiki platform. In versions starting from 4.5.1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the Solr script service doesn't take dropped programming rights into account. The Solr script service that is accessible in XWiki's...

CVE-2025-32971 XWiki Solr script service doesn't take dropped programming right into account

XWiki is a generic wiki platform. In versions starting from 4.5.1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the Solr script service doesn't take dropped programming rights into account. The Solr script service that is accessible in XWiki's...

SUSE-SU-2025:1419-1 Security update for redis

This update for redis fixes the following issues: - CVE-2025-21605: Fixed an output buffer denial of service. bsc1241708...

SUSE-SU-2025:1416-1 Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059182 fixes several issues. The following security issues were fixed: - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize bsc1233294. - CVE-2024-56650: netfilter: xtables: fix LED ID check in ledtgcheck bsc1235431...

CVE-2025-31651

A flaw was found in Apache Tomcat's rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use. Mitigation No mitigation is currently available that meets Red H...

[SECURITY] Fedora 40 Update: icecat-115.22.0-2.rh1.fc40

GNU IceCat is the GNU version of the Firefox ESR browser. Extensions included to this version of IceCat: LibreJS GNU LibreJS aims to address the JavaScript problem described in the article "The JavaScript Trap" of Richard Stallman. JShelter: Mitigates potential threats from JavaScript, including...