9161 matches found
postgresql:15 security update
An update is available for postgres-decoderbufs, postgresql, pgrepack, module.postgresql, module.postgres-decoderbufs, pgaudit, module.pgrepack, module.pgaudit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
postgresql:12 security update
An update is available for postgres-decoderbufs, postgresql, pgrepack, module.postgresql, module.postgres-decoderbufs, pgaudit, module.pgrepack, module.pgaudit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RLSA-2025:15022 Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-8714 For more details about the security issues,...
RLSA-2025:14899 Important: postgresql:16 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-8714 For more details about the security issues,...
RLSA-2025:15021 Important: postgresql:13 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-8714 For more details about the security issues,...
kernel: smb: client: fix race with concurrent opens in rename(2)
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename2 Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as well as marking all...
CVE-2025-58422
RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attack, they may alter the values of HTTP requests, which could result in tampering with the operation history of the product’s management tool...
CVE-2025-58422
CVE-2025-58422 affects Ricoh Streamline NX, versions 3.5.1 through 24R3. The issue allows an attacker performing a man-in-the-middle attack to alter HTTP request values, potentially tampering with the operation history of the product’s management tool. Connected sources confirm the root cause is ...
RICOH Streamline NX vulnerable to tampering with operation history
Overview RICOH Streamline NX provided by Ricoh Company, Ltd. contains the following vulnerability. Use of Less Trusted Source CWE-348 - CVE-2025-58422 Ricoh Company, Ltd. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Ricoh Company, Ltd. coordinated...
PT-2025-36436
Name of the Vulnerable Software and Affected Versions: RICOH Streamline NX versions 3.5.1 through 24R3 Description: RICOH Streamline NX is susceptible to operation history tampering. An attacker capable of performing a man-in-the-middle attack may manipulate HTTP requests, potentially altering th...
JVN#75307484: RICOH Streamline NX vulnerable to tampering with operation history
RICOH Streamline NX provided by Ricoh Company, Ltd. contains the following vulnerability. Use of Less Trusted Source CWE-348 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 2.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 3.1 CVE-2025-58422 Impact If an...
RICOH Streamline NX 安全漏洞
RICOH Streamline NX is a document and print management software from RICOH Japan. A security vulnerability exists in RICOH Streamline NX versions 3.5.1 through 24R3 that originates from a man-in-the-middle attack that can be performed by an attacker to change the value of an HTTP request, which...
CVE-2025-58422: Use of Less Trusted Source
RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attack, they may alter the values of HTTP requests, which could result in tampering with the operation history of the product’s management tool...
The vulnerability of the IPerf3 tool for measuring network bandwidth measurement lies in the fact that the exit operation occurs beyond the memory buffer boundaries, allowing a hacker to execute arbitrary code.
The vulnerability of the IPerf3 tool for measuring network bandwidth is related to the execution of operations beyond the buffer memory limits. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the GNU Bison parser generator lies in improper restrictions on operations within the buffer memory, which allows a malicious actor to trigger a service failure.
The vulnerability of the GNU Bison parser generator is related to incorrect restrictions on operations within the buffer memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
RockyLinux 8 : postgresql:12 (RLSA-2025:15115)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15115 advisory. postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-87...
RockyLinux 9 : postgresql:16 (RLSA-2025:14827)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:14827 advisory. postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-87...
RockyLinux 8 : postgresql:16 (RLSA-2025:14899)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:14899 advisory. postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-87...
RockyLinux 8 : postgresql:13 (RLSA-2025:15021)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15021 advisory. postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-87...
