30179 matches found
CVE-2025-24358
gorilla/csrf provides Cross Site Request Forgery CSRF prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Origin header against an allowlist. Its executes its validation of the Referer header for cross-origin requests only when it believes...
Trump Revenge Tour Targets Cyber Leaders, Elections
President Trump last week revoked security clearances for Chris Krebs , the former director of the Cybersecurity and Infrastructure Security Agency CISA who was fired by Trump after declaring the 2020 election the most secure in U.S. history. The White House memo, which also suspended clearances...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Base OS issues
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v4.8.7 is vulnerable to multiple Base OS issues
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v4.8.7 is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability...
CVE-2025-31491
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.1, AutoGPT allows of leakage of cross-domain cookies and protected headers in requests redirect. AutoGPT uses a wrapper around the requests...
PT-2025-16477 · Autodesk · Autodesk Revit
Name of the Vulnerable Software and Affected Versions: Autodesk Revit affected versions not specified Description: A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write issue. This can be leveraged by a malicious actor to cause a crash, data...
OPENSUSE-SU-2025:14994-1 gitoxide-0.42.0-1.1 on GA media
These are all security issues fixed in the gitoxide-0.42.0-1.1 package on the GA media of openSUSE Tumbleweed...
RHEL 6 / 7 : httpd24-httpd (RHSA-2015:1666)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1666 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Multiple flaws were found in the wa...
Google Chrome < 135.0.7049.95 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 135.0.7049.95. It is, therefore, affected by multiple vulnerabilities as referenced in the 202504stable-channel-update-for-desktop15 advisory. - Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remo...
CVE-2025-27892
Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. NOTE: this issue exists because of a CVE-2024-22406 and CVE-2024-42357 regression...
OPENSUSE-SU-2025:14997-1 oci-cli-3.54.1-1.1 on GA media
These are all security issues fixed in the oci-cli-3.54.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14993-1 GraphicsMagick-1.3.45-3.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.45-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14995-1 govulncheck-vulndb-0.0.20250410T162706-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250410T162706-1.1 package on the GA media of openSUSE Tumbleweed...
Latency using any Cloud application with 49" Inch Monitor ( using 5K resolution [5120*1440] )
After switching from On-Prem 1912 CU6 to Cloud 2203 CU3 - There is sluggish performance using a higher resolution monitors & increased in number of Monitors - Problem appears on 6 monitors with a resolution of 19201200 - Problemappears on 1x monitor with 49" curved monitor with a resolution of...
SUSE SLES15 Security Update : kernel (Live Patch 24 for SLE 15 SP4) (SUSE-SU-2025:1252-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1252-1 advisory. This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-41090: tap: add...
OPENSUSE-SU-2025:14996-1 hauler-1.2.2-1.1 on GA media
These are all security issues fixed in the hauler-1.2.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14998-1 python311-aiohttp-3.11.16-1.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed...
cosign-2.5.0-1.1 on GA media (moderate)
cosign-2.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14988-1 Rating: moderate Cross-References: CVE-2024-51744 CVE-2024-6104 CVE-2025-22868 CVE-2025-22869 CVE-2025-22870 CVE-2025-27144 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUS...
Mozilla Thunderbird < 128.9.2
The version of Thunderbird installed on the remote Windows host is prior to 128.9.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-27 advisory. - When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header...