30191 matches found
MAL-2025-2911 Malicious code in vistar-ad-clienttestadv67 (npm)
--- -= Per source details. Do not edit below this line.=-...
Overcoming the Challenges of Vulnerability Remediation
The following is a guest blog post by Zac Youtz, Co-Founder and CTO at valued Rapid7 partner, Furl. Here, Zac discusses how to effectively remediate vulnerabilities discovered by Rapid7’s InsightVM. Scaling vulnerability remediation with AI Vulnerability remediation is a crucial-yet-complex task...
MD5 Hash Collisions
sagemaker is vulnerable to MD5 Hash Collisions. The vulnerability is due to weak hashing in workflow identification due to the reuse of results from different configurations that produce the same MD5 hash, potentially leading to unintended workflow replacements and integrity issues...
OPENSUSE-SU-2025:14936-1 ffmpeg-4-4.4.5-9.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.5-9.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7383-1)
"The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7383-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
OPENSUSE-SU-2025:14937-1 govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250327T184518-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu: Security Advisory (USN-7383-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-12619
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...
CVE-2024-10307
An issue has been discovered in GitLab EE/CE affecting all versions from 12.10 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A maliciously crafted file can cause uncontrolled CPU consumption when viewing the associated merge request...
OPENSUSE-SU-2025:14944-1 rke2-1.31-1.31.7+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.31-1.31.7+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-13562 · Fig2Dev +4 · Fig2Dev +4
Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.9a Description: The issue is related to a floating point exception in the fig2dev component, specifically in the get slope function. This exception can be triggered by an attacker through local input manipulation,...
OPENSUSE-SU-2025:14942-1 rke2-1.29-1.29.15+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.29-1.29.15+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14935-1 exim-4.98.2-1.1 on GA media
These are all security issues fixed in the exim-4.98.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14941-1 rke2-1.32.3+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.32.3+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7390-1)
"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7390-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...
Fedora 40 : libssh2 (2025-aaa849ae74)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-aaa849ae74 advisory. This update, to the current upstream libssh2 release, addresses a couple of security issues: CVE-2023-6918 missing checks for return values for...
Azure Linux 3.0 Security Update: libssh (CVE-2023-6918)
The version of libssh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6918 advisory. - A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by...
iOS Workspace App 2501.10 - How to Fix Login Hang at "Stay Signed In" Prompt
Users of the Citrix Workspace app on iOS devices may experience a hang or freeze at the "Stay Signed In" prompt after adding their Citrix Cloud workspace URL. The app becomes unresponsive, preventing users from selecting either "Allow" or "Deny."...