Huawei HarmonyOS interpreter string module out-of-bounds read vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the Huawei HarmonyOS interpreter string module, which can be exploited by an attacker to cause availability to ...

CVE-2025-26466

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to ...

OPENSUSE-SU-2025:14819-1 kubernetes1.32-apiserver-1.32.2-1.1 on GA media

These are all security issues fixed in the kubernetes1.32-apiserver-1.32.2-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Firefox < 135.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 135.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-12 advisory. - Memory safety bugs present in Firefox 135. Some of these bugs showed evidence of memory corruption and we presume...

openSUSE Security Advisory (SUSE-SU-2025:0299-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:0431-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14820-1 openssh-9.9p2-1.1 on GA media

These are all security issues fixed in the openssh-9.9p2-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Symfony vulnerabilities (USN-7272-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7272-1 advisory. Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker could possibly use this...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Atril vulnerabilities (USN-7274-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7274-1 advisory. It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial o...

OPENSUSE-SU-2025:14815-1 google-osconfig-agent-20250115.01-2.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20250115.01-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14817-1 kubernetes1.30-apiserver-1.30.10-1.1 on GA media

These are all security issues fixed in the kubernetes1.30-apiserver-1.30.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14818-1 kubernetes1.31-apiserver-1.31.6-1.1 on GA media

These are all security issues fixed in the kubernetes1.31-apiserver-1.31.6-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-26758

creationtimestamp| type| source ---|---|--- 2025-02-17 11:43:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114019047703215178 2025-02-17 12:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepy5pd4r27 2025-02-17 14:02:15+00:00| seen|...

MAL-2025-1430 Malicious code in p2pb2b-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f7063c9fcff0127b36c127dedd6b0a9f5ea43bc5ae8534adea55a756413730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IBM Security Verify Access Authorization Issues Vulnerability

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

ALSA-2025:1611 Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083...

CVE-2024-57970

creationtimestamp| type| source ---|---|--- 2025-02-16 04:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3libeoe5ts42g 2025-02-16 05:11:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4575 2025-02-16 07:05:20+00:00| seen|...

OPENSUSE-SU-2025:14814-1 obs-service-cargo-4.5.0-2.1 on GA media

These are all security issues fixed in the obs-service-cargo-4.5.0-2.1 package on the GA media of openSUSE Tumbleweed...

Advisory ROSA-SA-2025-2683

Software: grub2 2.02 OS: ROSA Virtualization 3.0 packageevrstring: grub2-2.02-148.0.3 CVE-ID: CVE-2022-2601 BDU-ID: 2022-06819 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the grubfontconstructglyph function of the Grub2 operating systems boot loader is related to an operation exceeding buffer...

CVE-2024-13488

creationtimestamp| type| source ---|---|--- 2025-02-15 11:29:28+00:00| seen| https://infosec.exchange/users/cve/statuses/114007668658448921 2025-02-15 12:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li7p2ilhx22t 2025-02-15 13:11:17+00:00| seen|...