CVE-2025-7909

A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. Affected by this issue is the function sprintf of the file /goform/formLanSetupRouterSettings of the component Boa Webserver. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack m...

cyradm-3.8.6-1.1 on GA media (moderate)

cyradm-3.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15369-1 Rating: moderate Cross-References: CVE-2025-49812 CVSS scores: CVE-2025-49812 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L CVE-2025-49812 SUSE : 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N...

CVE-2025-7853

A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

java-21-openjdk-21.0.8.0-1.1 on GA media (moderate)

java-21-openjdk-21.0.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15362-1 Rating: moderate Cross-References: CVE-2025-30749 CVE-2025-30754 CVE-2025-50059 CVE-2025-50106 CVSS scores: CVE-2025-30749 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2025-30749 SUSE : 8.3...

apache2-2.4.64-1.1 on GA media (moderate)

apache2-2.4.64-1.1 on GA media Announcement ID: openSUSE-SU-2025:15360-1 Rating: moderate Cross-References: CVE-2024-42516 CVE-2024-43204 CVE-2024-43394 CVE-2024-47252 CVE-2025-23048 CVE-2025-49630 CVE-2025-49812 CVE-2025-53020 CVSS scores: CVE-2024-42516 SUSE : 4...

libxml2-2-2.13.8-3.1 on GA media (moderate)

libxml2-2-2.13.8-3.1 on GA media Announcement ID: openSUSE-SU-2025:15363-1 Rating: moderate Cross-References: CVE-2025-7425 CVSS scores: CVE-2025-7425 SUSE : 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H CVE-2025-7425 SUSE : 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H...

CVE-2025-7853 Tenda FH451 SetIpBind fromSetIpBind stack-based overflow

A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

java-24-openjdk-24.0.2.0-1.1 on GA media (moderate)

java-24-openjdk-24.0.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15358-1 Rating: moderate Cross-References: CVE-2025-30749 CVE-2025-30754 CVE-2025-30761 CVE-2025-50059 CVE-2025-50106 CVSS scores: CVE-2025-30749 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2025-30749 SUSE :...

cosign-2.5.3-1.1 on GA media (moderate)

cosign-2.5.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15355-1 Rating: moderate Cross-References: CVE-2025-46569 CVSS scores: CVE-2025-46569 SUSE : 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L CVE-2025-46569 SUSE : 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N...

CVE-2025-7792

CVE-2025-7792 affects Tenda FH451 (version 1.0.0.9). The vulnerability resides in the formSafeEmailFilter function in /goform/SafeEmailFilter, where manipulation of the page argument leads to a stack-based buffer overflow. It can be triggered remotely and the exploit has been publicly disclosed. ...

fractal-12.beta+14-1.1 on GA media (moderate)

fractal-12.beta+14-1.1 on GA media Announcement ID: openSUSE-SU-2025:15351-1 Rating: moderate Cross-References: CVE-2025-53549 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

chromedriver-138.0.7204.157-1.1 on GA media (moderate)

chromedriver-138.0.7204.157-1.1 on GA media Announcement ID: openSUSE-SU-2025:15350-1 Rating: moderate Cross-References: CVE-2025-6558 CVE-2025-7656 CVE-2025-7657 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all securi...

ImageMagick-7.1.2.0-1.1 on GA media (moderate)

ImageMagick-7.1.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15349-1 Rating: moderate Cross-References: CVE-2025-53014 CVE-2025-53015 CVE-2025-53019 CVE-2025-53101 CVSS scores: CVE-2025-53014 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2025-53014 SUSE : 6.3...

kubelogin-0.2.10-1.1 on GA media (moderate)

kubelogin-0.2.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15352-1 Rating: moderate Cross-References: CVE-2025-22871 CVSS scores: CVE-2025-22871 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2025-22871 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

SUSE: Security Advisory (SUSE-SU-2025:02312-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7585-7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-20274 Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to improper validation of files that are uploaded to the web-based management...

CVE-2025-20274 Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to improper validation of files that are uploaded to the web-based management...

libQt6Concurrent6-6.9.1-2.1 on GA media (moderate)

libQt6Concurrent6-6.9.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:15345-1 Rating: moderate Cross-References: CVE-2025-5992 CVSS scores: CVE-2025-5992 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-5992 SUSE : 2.3...