Important: Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.2

Red Hat Trusted Profile Analyzer 1.2.2 release Red Hat Product Security has rated this update as having a security impact of Moderate Red Hat Trusted Profile Analyzer 1.2.2...

XSS when checking tables

PMASA-2025-1 Announcement-ID: PMASA-2025-1 Date: 2025-01-20 Updated: 2025-01-23 Summary XSS when checking tables Description An XSS vulnerability has been discovered with the phpMyAdmin "Check tables" feature. A specially–crafted table or database name could be used to trigger an XSS attack...

golang-github-prometheus-prometheus-3.1.0-1.1 on GA media (moderate)

golang-github-prometheus-prometheus-3.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14660-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves on...

amazon-ssm-agent-3.3.1611.0-1.1 on GA media (moderate)

amazon-ssm-agent-3.3.1611.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14658-1 Rating: moderate Cross-References: CVE-2025-21613 CVSS scores: CVE-2025-21613 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media (moderate)

velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media Announcement ID: openSUSE-SU-2025:14663-1 Rating: moderate Cross-References: CVE-2023-1732 CVE-2023-44270 CVE-2023-45133 CVE-2023-45683 CVE-2023-46234 CVE-2024-21538 CVE-2024-23331 CVE-2024-24786 CVE-2024-28180 CVE-2024-31207 CVE-2024-37298...

perl-IO-Compress-2.213.0-1.1 on GA media (moderate)

perl-IO-Compress-2.213.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14657-1 Rating: moderate Cross-References: CVE-2016-1238 CVSS scores: CVE-2016-1238 SUSE : 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

git-lfs-3.6.1-1.1 on GA media (moderate)

git-lfs-3.6.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14649-1 Rating: moderate Cross-References: CVE-2024-53263 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the git-lfs-3.6.1-1.1...

libraptor-devel-2.0.16-4.1 on GA media (moderate)

libraptor-devel-2.0.16-4.1 on GA media Announcement ID: openSUSE-SU-2025:14646-1 Rating: moderate Cross-References: CVE-2024-57823 CVSS scores: CVE-2024-57823 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2024-57823 SUSE : 6.9...

dcmtk-3.6.9-1.1 on GA media (moderate)

dcmtk-3.6.9-1.1 on GA media Announcement ID: openSUSE-SU-2025:14643-1 Rating: moderate Cross-References: CVE-2024-47796 CVE-2024-52333 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

proftpd-1.3.8c-1.1 on GA media (moderate)

proftpd-1.3.8c-1.1 on GA media Announcement ID: openSUSE-SU-2025:14636-1 Rating: moderate Cross-References: CVE-2024-48651 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the proftpd-1.3.8c-1....

frr-10.2.1-1.1 on GA media (moderate)

frr-10.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14632-1 Rating: moderate Cross-References: CVE-2024-55553 CVSS scores: CVE-2024-55553 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2024-55553 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

yq-4.44.6-1.1 on GA media (moderate)

yq-4.44.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:14639-1 Rating: moderate Cross-References: CVE-2024-45338 CVSS scores: CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-45338 SUSE : 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

perl-Module-ScanDeps-1.370.0-1.1 on GA media (moderate)

perl-Module-ScanDeps-1.370.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14635-1 Rating: moderate Cross-References: CVE-2024-10224 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

dpdk-23.11.1-4.1 on GA media (moderate)

dpdk-23.11.1-4.1 on GA media Announcement ID: openSUSE-SU-2025:14631-1 Rating: moderate Cross-References: CVE-2024-11614 CVSS scores: CVE-2024-11614 SUSE : 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

grafana-11.3.0-4.1 on GA media (moderate)

grafana-11.3.0-4.1 on GA media Announcement ID: openSUSE-SU-2025:14633-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

python311-slixmpp-1.8.6-1.1 on GA media (moderate)

python311-slixmpp-1.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:14628-1 Rating: moderate Cross-References: CVE-2022-45197 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2024-13245 CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting XSS.This issue affects CKEditor 4 LTS - WYSIWYG HTML editor: from 1.0.0 before 1.0.1...

CVE-2024-13239 Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-003

Weak Authentication vulnerability in Drupal Two-factor Authentication TFA allows Authentication Abuse.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.5.0...

CVE-2024-43662

The .exe or .exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectively as any user, although the user interface for uploading files is only shown to the iocadmin user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderat...

CVE-2024-43652

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701 Likelihood: Moderate – The binary does not seem to be used by the web interface, ...