30179 matches found
You Can’t Secure What You Can’t See: The Real Pain CAASM Solves
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all! Let’s cut through the marketing haze for a moment. There’s a reas...
BELL-CVE-2025-22056
Bulletin has no description...
Oracle Database Server (April 2025 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2025 CPU advisory. - Security-in-Depth issue in the Oracle Database Grid Apache Tomcat component of Oracle Database Server. This vulnerability cannot be exploite...
CBL Mariner 2.0 Security Update: qemu (CVE-2023-3180)
The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3180 advisory. - A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in...
OPENSUSE-SU-2025:15010-1 ffmpeg-6-6.1.2-3.1 on GA media
These are all security issues fixed in the ffmpeg-6-6.1.2-3.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.8
Updated service-interconnect container images are now available for Service Interconnect 1.8 for RHEL 9. Users of service-interconnect 1.8 rhel9 container images are advised to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs. Users of thes...
Care what you share
Welcome to this week's edition of the Threat Source newsletter. As we navigate our daily routines, certain tasks become second nature to us, especially if they are integral to our professions. However, what feels instinctive to one person might be foreign to another. This disparity is akin to a...
CVE-2025-3522
Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to determine file size, and navigates to it when the user clicks the attachment. Because the URL is not validate...
CVE-2025-32578
CVE-2025-32578 is a Reflected XSS in the WordPress plugin Coming Soon Countdown (vulnerable up to and including 2.2). The vulnerability arises during web page generation where user-controlled input is improperly neutralized, enabling reflected scripts. The CVE entry notes the impact as cross-site...
CVE-2025-32929
Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Barcode Generator for WooCommerce: from n/a through ...
USN-7442-1: Ruby vulnerabilities
It was discovered that the Ruby CGI gem incorrectly handled parsing certain cookies. A remote attacker could possibly use this issue to consume resources, leading to a denial of service. CVE-2025-27219 It was discovered that the Ruby CGI gem incorrectly handled parsing certain regular expressions...
SUSE-SU-2025:1336-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.1 - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web content bsc1240962 - CVE-2025-24208: permissions issue may lead to a cross-site scripting attack when loading a...
Important: Red Hat Security Advisory: tigervnc security update
An update for tigervnc is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
Yokogawa Recorder Products
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to manipulate information on the affected products. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...
BELL-CVE-2025-22020
Bulletin has no description...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.49 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.49 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
ROS-20250417-04
A vulnerability in the numbers.ct file of the libxslt library is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in libxslt library's xsltGetInheritedNsList function is related to memory usage after...
OPENSUSE-SU-2025:15006-1 argocd-cli-2.14.10-1.1 on GA media
These are all security issues fixed in the argocd-cli-2.14.10-1.1 package on the GA media of openSUSE Tumbleweed...
Oracle Essbase Multiple Vulnerabilities (April 2025 CPU)
The version of Oracle Essbase installed on the remote host is missing a security patch from the April 2025 Critical Patch Update CPU. It is, therefore, affected by: - Vulnerability in Oracle Essbase component: Web Platform OpenSSL. The supported version that is affected is 21.7.1.0.0. Easily...