GHSA-JRG7-VPCV-RF8R vulnerabilities

Vulnerabilities for packages: samba...

GHSA-99JH-QMJR-PM5J vulnerabilities

Vulnerabilities for packages: samba...

GHSA-V2J8-2Q45-8JCQ vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-65FJ-56W9-GR9R vulnerabilities

Vulnerabilities for packages: apache2...

GHSA-P5HW-4FXJ-G4X6 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-V2J8-2Q45-8JCQ vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

RHEL 8 : tigervnc (RHSA-2025:2880)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2880 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

RHEL 8 : postgresql:12 (RHSA-2025:3064)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3064 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL quoting APIs miss neutralizing...

RHEL 7 : xorg-x11-server (RHSA-2025:2879)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2879 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical use...

RHEL 7 : tigervnc (RHSA-2025:2861)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2861 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

RHEL 8 : firefox update (Important) (RHSA-2024:6850)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6850 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. For more details about the...

CVE-2021-23807 vulnerabilities

Vulnerabilities for packages: py3-jsonpointer...

GHSA-F9JC-68CV-WP63 vulnerabilities

Vulnerabilities for packages: nodejs...

SUSE-SU-2025:0981-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers bsc1238450...

Security Bulletin: IBM Application Modernization Accelerator is vulnerable to multiple vulnerabilities found in Java and Node.js

Summary There are multiple vulnerabilities in Java and Node.js used by IBM Application Modernization Accelerator CVE-2025-26791, CVE-2025-1470, CVE-2025-1471. Vulnerability Details CVEID:CVE-2025-26791 DESCRIPTION: DOMPurify before 3.2.4 has an incorrect template literal regular expression,...

GHSA-4W4V-5HC9-XRR2 vulnerabilities

Vulnerabilities for packages: solr...

GHSA-M9GF-397R-HWPG vulnerabilities

Vulnerabilities for packages: solr...

Mattermost allows members with permission to convert public channels to private and convert private to public

Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8 fail to to enforce channel conversion restrictions, which allows members with permission to convert public channels to private ones to also convert private ones to public...

Privilege Escalation

camaleoncms is vulnerable to Privilege Escalation. The vulnerability is due to the use of the dangerous permit! method through mass assignment, which allows all parameters to pass through without filtering...

CVE-2024-54551

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing web content may lead to a denial-of-service...