AWS VDP: Non-Production API Endpoints for the cloudwatch Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration

The vulnerability allows adversaries to silently enumerate permissions of compromised AWS credentials for the CloudWatch service without generating logs in CloudTrail. Two non-production API endpoints were identified that can be accessed with standard IAM credentials but do not log the activity...

SUSE-SU-2025:0328-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

SUSE-SU-2025:0325-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

SUSE SLES15: clamav / clamav-devel / clamav-docs-html / clamav-milter / etc (SUSE-SU-2025:0325-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0325-1 advisory. New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a...

SUSE SLED15: clamav / clamav-devel / clamav-docs-html / clamav-milter / etc (SUSE-SU-2025:0327-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0327-1 advisory. New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr7), org.wildfly.core:wildfly-embedded (1.0.0.cr7) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.cr7)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr7 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-core-dist (3.0.0.alpha15), org.wildfly.core:wildfly-core-feature-pack (3.0.0.alpha15) +17 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (3.0.0.alpha15)

org.wildfly.core:wildfly-server MAVEN version 3.0.0.alpha15 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.alpha15 -...

org.wildfly.core:wildfly-core-dist (2.2.0.cr3), org.wildfly.core:wildfly-core-feature-pack (2.2.0.cr3) +14 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.2.0.cr3)

org.wildfly.core:wildfly-server MAVEN version 2.2.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 2.2.0.cr3 - org.wildfly.core:wildfly-core-feature-pack...

org.wildfly.core:wildfly-core-dist (3.0.0.alpha3), org.wildfly.core:wildfly-core-feature-pack (3.0.0.alpha3) +14 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (3.0.0.alpha3)

org.wildfly.core:wildfly-server MAVEN version 3.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.alpha3 - org.wildfly.core:wildfly-core-feature-pa...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha13), org.wildfly.core:wildfly-embedded (2.0.0.alpha13) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.alpha13)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha13 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha13 -...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha12), org.wildfly.core:wildfly-embedded (2.0.0.alpha12) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.alpha12)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha12 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha12 -...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha10), org.wildfly.core:wildfly-embedded (2.0.0.alpha10) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.alpha10)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha10 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha10 -...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha9), org.wildfly.core:wildfly-embedded (2.0.0.alpha9) +28 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.alpha9)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha9 - org.wildfly.core:wildfly-embedd...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha8), org.wildfly.core:wildfly-embedded (2.0.0.alpha8) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.alpha8)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha8 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha8 - org.wildfly.core:wildfly-embedd...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr1), org.wildfly.core:wildfly-embedded (1.0.0.cr1) +30 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.cr1)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr1 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta6), org.wildfly.core:wildfly-embedded (1.0.0.beta6) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.beta6)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta6 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta4), org.wildfly.core:wildfly-embedded (1.0.0.beta4) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.beta4)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta4 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta3), org.wildfly.core:wildfly-embedded (1.0.0.beta3) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.beta3)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta3 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta2), org.wildfly.core:wildfly-embedded (1.0.0.beta2) +29 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.beta2)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta2 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha19), org.wildfly.core:wildfly-jmx (1.0.0.alpha19) +5 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.alpha19)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.alpha19 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha19 - org.wildfly.core:wildfly-jmx...