12013 matches found
GHSA-XX4V-PRFH-6CGC @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Summary A Regular Expression Denial of Service ReDoS vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long sequence of spaces followed by a newline and "@", an attacker can exploit inefficient regular expression processin...
SUSE-SU-2025:0548-1 Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes quadratic time to complete. bsc1236878...
SUSE-SU-2025:0546-1 Security update golang-github-prometheus-prometheus
golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: - Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 - Highlights of other changes: Performance: + Significant enhancements to PromQL execution...
SUSE-SU-2025:0525-1 Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot was updated to version 0.1.1728559936.c16d4fb: - Added MAC based terminal naming option jscSUMA-314 golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: - Security issues fixed: CVE-2024-51744: Updated...
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 Highlights of other changes: Performance: Significant...
SUSE-SU-2025:0524-1 Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: - Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 - Highlights of other changes: Performance: +...
New mandatory USCG cyber regulations. What you need to know
TL;DR US Coast Guard introduces mandatory new Marine Transportation System cybersecurity requirements They take effect on July 16, 2025, and training must begin by July 17, 2025 US flagged large commercial vessels affected Cybersecurity Officers CySO need to be appointed Penetration testing of...
SUSE CVE-2024-45769
A vulnerability was found in Performance Co-Pilot PCP. This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash...
Microsoft high-performance computing (HPC) Pack Installed (Windows)
Binary data microsofthpcwininstalled.nbin...
RLSA-2025:1215 Moderate: tbb security update
Threading Building Blocks TBB is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance. Security Fixes: jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 For more details about the securit...
SUSE-SU-2025:0512-1 Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes quadratic time to complete. bsc1236878...
[SECURITY] Fedora 40 Update: rust-pore-0.1.17-5.fc40
A performance oriented reimplementation of repo...
CVE-2025-21198
Microsoft High Performance Compute HPC Pack Remote Code Execution Vulnerability...
CVE-2025-21179 DHCP Client Service Denial of Service Vulnerability
...
Exploring a VPN Appliance: A Researcher?s Journey
...
Astra Linux – Vulnerability in bind9
Resolver caches and authoritative zone databases that hold a significant number of Resource Records for the same hostname of any RTYPE may experience degraded performance as content is added or updated, as well as when handling client queries for this name. This issue affects BIND 9 versions 9.11...
PT-2025-6682 · Intel · Intel Gpa +1
Name of the Vulnerable Software and Affected Versions: IntelR GPA and IntelR GPA Framework affected versions not specified Description: The issue concerns incorrect default permissions for some software installers, potentially allowing an authenticated user to enable escalation of privilege via...
Microsoft High Performance Compute Pack 安全漏洞
Microsoft High Performance Compute Pack HPC is a high-performance computing HPC solution from Microsoft Corporation USA that is primarily used to create and manage high-performance computing clusters. A security vulnerability exists in Microsoft High Performance Compute Pack HPC. An attacker...
PT-2025-6295
Name of the Vulnerable Software and Affected Versions: Microsoft High Performance Compute HPC Pack affected versions not specified Description: The issue concerns a remote code execution problem. There is no information provided about the estimated number of potentially affected devices worldwide...