GHSA-QJ3J-6M66-G436 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-RXJF-75RJ-R875 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-87J7-HJRV-H93W vulnerabilities

Vulnerabilities for packages: mysql...

openSUSE Security Advisory (SUSE-SU-2024:0893-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2024:0300-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2024:0400-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4065-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-45778

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash...

OPENSUSE-SU-2025:14820-1 openssh-9.9p2-1.1 on GA media

These are all security issues fixed in the openssh-9.9p2-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1434 Malicious code in pionex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140b5ef89db32e0c5bc1f860989081e6cdb3bcc488bafdb1b3e7e78ee78d29dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2025:14809-1 curl-8.12.1-1.1 on GA media

These are all security issues fixed in the curl-8.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1355 Malicious code in uzx-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 480bcafaaaad658c3b61f5335846df6701c8e8eda0856c45fcd0c1c55babfa1d Any computer that has this package install...

OPENSUSE-SU-2025:14768-1 grafana-11.5.1-1.1 on GA media

These are all security issues fixed in the grafana-11.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14765-1 netty-4.1.118-1.1 on GA media

These are all security issues fixed in the netty-4.1.118-1.1 package on the GA media of openSUSE Tumbleweed...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1188)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14756-1 libtasn1-6-32bit-4.20.0-1.1 on GA media

These are all security issues fixed in the libtasn1-6-32bit-4.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14759-1 python312-3.12.9-1.1 on GA media

These are all security issues fixed in the python312-3.12.9-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, nri-nagios, sbom-convert, opentelemetry-operator, secrets-store-csi-driver-provider-gcp-fips, grafana-mimir, sriov-network-device-plugin-fips, kube-vip-fips, buildkitd-fips, kuberlr, spire-server-fips, sbom-scorecard,...

OPENSUSE-SU-2025:14741-1 ruby3.4-rubygem-http-cookie-1.0.8-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-http-cookie-1.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2020-5259

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...