GHSA-XWFJ-JGWM-7WP5 vulnerabilities

Vulnerabilities for packages: rustup, linkerd2-cni-plugin, ztunnel, ztunnel-fips, parseable, shadowsocks-rust, oranda, qdrant, atuin, linkerd-network-validator, toda, uv, kdash, linkerd2-proxy, linkerd-extension-init, zizmor, wadm, pixi, ruff, pgcat, wasmcloud, topgrade, mountpoint-s3, buck2, ber...

CGA-MJ82-44VG-3Q9V

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2022-31214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail...

Linux Distros Unpatched Vulnerability : CVE-2023-33863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff SIZEMAX a...

Linux Distros Unpatched Vulnerability : CVE-2023-3649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file CVE-2023-3649 Note that Nessus relies on...

CVE-2025-9675 Voice Changer App com.tuyangkeji.changevoice AndroidManifest.xml improper export of android application components

A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.tuyangkeji.changevoice. Executing manipulation can lead to improper export of android application components. It is possible to launch t...

DoS Vulnerability in ntpd-rs

Summary A denial of service vulnerability was discovered in ntpd-rs where an attacker can induce a message storm between two NTP servers running ntpd-rs. Details Since ntpd-rs version 1.2.0, when configured as a server, incorrectly responded to all NTP messages sent to the server's port with a ti...

CVE-2025-9671

CVE-2025-9671 affects the UAB Paytend App up to version 2.1.9 on Android, impacting the AndroidManifest.xml of the component com.passport.cash . The vulnerability is described as an improper export of Android components, enabling a local attack. The exploit has been publicly released, and the ven...

CVE-2025-30273

creationtimestamp| type| source ---|---|--- 2025-08-29 19:03:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxkqqkadhd2p...

MAL-2025-41959 Malicious code in cookies-logger (npm)

The package cookies-logger was found to contain malicious code...

CGA-83JR-RH5Q-7V4F

Bulletin has no description...

GHSA-JC7W-C686-C4V9 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform, k9s, xeol-fips, filebrowser, tflint, drone, conftest-fips, trivy, cloudbeat-fips, trivy-operator-fips, terraform, kubescape-operator, chainctl, nsc-fips, grafana-alloy-fips, regclient-fips, drone-fips, envoy-gateway-fips, terragrunt,...

CVE-2025-9605

creationtimestamp| type| source ---|---|--- 2025-08-29 06:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjhp66dn52n...

CVE-2025-9606

Portabilis i-Educar (up to 2.10; some sources indicate a fix in 2.11) has a SQL injection in /intranet/agenda_preferencias.php via the cod_agenda parameter. The vulnerability allows remote exploitation and the exploit is publicly available. Affected component: the unknown functionality surroundin...

openSUSE Security Advisory (SUSE-SU-2025:02993-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-35285

Name of the Vulnerable Software and Affected Versions: Qsync Central versions prior to 4.5.0.7 Description: An improper certificate validation issue exists in Qsync Central. A remote attacker gaining a user account can compromise system security. Recommendations: Update to Qsync Central version...

Debian: Security Advisory (DLA-4285-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7725-2: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Overlay file system; - Network traffic control; CVE-2025-21887, CVE-2024-57996, CVE-2025-38350, CVE-2025-37752...

CGA-P6FC-Q7QM-79GH

Bulletin has no description...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2021-23336...