30192 matches found
OPENSUSE-SU-2025:14926-1 kubernetes1.31-apiserver-1.31.7-1.1 on GA media
These are all security issues fixed in the kubernetes1.31-apiserver-1.31.7-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-27810
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays...
OPENSUSE-SU-2025:14927-1 kubernetes1.32-apiserver-1.32.3-1.1 on GA media
These are all security issues fixed in the kubernetes1.32-apiserver-1.32.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14928-1 libmbedcrypto7-2.28.10-1.1 on GA media
These are all security issues fixed in the libmbedcrypto7-2.28.10-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14924-1 kubernetes1.29-apiserver-1.29.15-1.1 on GA media
These are all security issues fixed in the kubernetes1.29-apiserver-1.29.15-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14925-1 kubernetes1.30-apiserver-1.30.11-1.1 on GA media
These are all security issues fixed in the kubernetes1.30-apiserver-1.30.11-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14923-1 docker-stable-24.0.9_ce-8.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9ce-8.1 package on the GA media of openSUSE Tumbleweed...
Cilium node based network policies may incorrectly allow workload traffic
Impact Node based network policies fromNodes and toNodes will incorrectly permit traffic to/from non-node endpoints that share the labels specified in fromNodes and toNodes sections of network policies. Node based network policy is disabled by default in Cilium. Patches This issue was fixed by...
USN-7369-1: elfutils vulnerabilities
It was discovered that readelf from elfutils could be made to read out of bounds. If a user or automated system were tricked into running readelf on a specially crafted file, an attacker could cause readelf to crash, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS...
CVE-2025-24514
creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:56:48+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5qr5t6uk2k 2025-03-24 22:01:06+00:00| seen|...
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More
A quiet tweak in a popular open-source tool opened the door to a supply chain breach—what started as a targeted attack quickly spiraled, exposing secrets across countless projects. That wasn't the only stealth move. A new all-in-one malware is silently stealing passwords, crypto, and control—whil...
CVE-2025-1062
The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example i...
USN-7365-1: NLTK vulnerabilities
It was discovered that NLTK contained a regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a denial of service. CVE-2021-3842, CVE-2021-43854...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Rack vulnerabilities (USN-7366-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7366-1 advisory. Nht Thi discovered that Rack incorrectly handled certain usernames. A remote attacker...
OPENSUSE-SU-2025:14920-1 gitleaks-8.24.2-1.1 on GA media
These are all security issues fixed in the gitleaks-8.24.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14919-1 forgejo-10.0.3-1.1 on GA media
These are all security issues fixed in the forgejo-10.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-22513 · Sangoma +1 · Asterisk +2
Name of the Vulnerable Software and Affected Versions: Asterisk versions prior to 18.26.2 Asterisk versions prior to 20.14.1 Asterisk versions prior to 21.9.1 Asterisk versions prior to 22.4.1 certified-asterisk versions prior to 18.9-cert14 certified-asterisk versions prior to 20.7-cert5...
Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : elfutils vulnerabilities (USN-7369-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7369-1 advisory. It was discovered that readelf from elfutils could be made to read out of bounds. If a user or automated system were tricked into...
