204 matches found
CVE-2025-6428
When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected.. This vulnerability was fixed in Firefox 140...
Updated golang packages fix security vulnerabilities
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673. os: inconsistent handling of OCREATE|OEXCL on Unix and Windows os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when th...
RHEL 10 : kernel (RHSA-2025:7956)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7956 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: dm-flakey: Fix memory...
MGASA-2025-0167 Updated sqlite3 packages fix security vulnerability
In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service application crash. An sznBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect. CVE-2025-29088...
RHEL 8 : kernel (RHSA-2025:7901)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7901 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: ipset: add missing...
MGASA-2025-0161 Updated nodejs packages fix security vulnerabilities
Corrupted pointer in node::fs::ReadFileUtf8const FunctionCallbackInfo& args when args0 is a string. CVE-2025-23165 Improper error handling in async cryptographic operations crashes process. CVE-2025-23166 Improper HTTP header block termination in llhttp. CVE-2025-23167...
Oracle Linux 9 : kernel (ELSA-2025-6966)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-6966 advisory. - net: stmmac: dwmac-tegra: Read iommu stream id from device tree Izabela Bakollari RHEL-75649 CVE-2025-21663 - net: stmmac: Fix zero-division error wh...
Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities
Better TLS connection support. CVE-2025-21587 Improve compiler transformations. CVE-2025-30691 Enhance Buffered Image handling. CVE-2025-30698 The updated timezone data are needed by the new Java packages...
CVE-2025-4432 vulnerabilities
Vulnerabilities for packages: uv, rye, linkerd2-proxy, shadowsocks-rust, linkerd-extension-init, rustup, wasm-pack, zed, cargo-audit, qdrant, samply, kdash, pixi, atuin, deno, sccache, zola, wasmcloud, ntpd-rs, wasmtime, wadm, sqlx, zizmor, nushell, xh, sdp-k8s-injector, oranda, lychee, rustls-ff...
Debian: Security Advisory (DLA-4157-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-VVGC-356P-C3XW vulnerabilities
Vulnerabilities for packages: kubernetes-event-exporter, velero-plugin-for-aws-fips, mc-fips, temporal, opa-fips-envoy, helm-push, tailscale, metallb-fips, node-problem-detector-fips, yunikorn-k8shim-fips, crossplane-provider-aws-kms, vault, velero-plugin-for-microsoft-azure,...
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: trivy, zarf, k9s, flux, helm-push, cert-manager-cmctl, flux-helm-controller, helm-operator-fips, cluster-api-helm-controller-fips, cert-manager-cmctl-fips, helm-docs, zot, consul-k8s, kuma, chartmuseum, tw, harbor, rancher-helm, flux-helm-controller-fips, kubescape,...
Updated augeas packages fix security vulnerability
Hercules Augeas fa.c recaseexpand null pointer dereference. CVE-2025-2588...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: tekton-chains-fips, mc-fips, sftpgo-plugin-pubsub, thanos, crossplane-provider-azure-sql, atlantis-fips, boring-registry, flux-image-reflector-controller, flux-image-reflector-controller-fips, kubeflow-katib, flux-kustomize-controller-fips, tekton-chains, rekor-fips,...
MGASA-2025-0103 Updated libreoffice packages fix security vulnerability
Macro URL arbitrary script execution. CVE-2025-1080...
MGASA-2025-0100 Updated php packages fix security vulnerabilities
Bugs and security with streams have been fixed...
MGASA-2025-0097 Updated man2html packages fix security vulnerability
In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In versions before GLIBC version 2.29 and if aligned correctly, ...
CVE-2025-22870 vulnerabilities
Vulnerabilities for packages: wave, flux-kustomize-controller, crossplane-provider-keycloak, cass-operator, glow, kbld, crossplane-provider-azure-storage, k8sgpt-operator, crossplane-provider-aws-eks, controller-gen, sonobuoy, conftest, terraform-provider-google, eksctl, nginx-prometheus-exporter...
GHSA-4P46-PWFR-66X6 vulnerabilities
Vulnerabilities for packages: zola, pixi, ntpd-rs, sqlx, cargo-audit, wasm-pack, kdash, parseable, zed, lychee, uv, samply, wadm, wash, atuin, sccache, wasmcloud, zizmor, oranda, tealdeer, rustup, xh, qdrant, linkerd2-proxy, rustls-ffi, nushell, rye, wasmtime, deno, shadowsocks-rust,...
