mailman3-3.3.10-2.1 on GA media (moderate)

mailman3-3.3.10-2.1 on GA media Announcement ID: openSUSE-SU-2025:15344-1 Rating: moderate Cross-References: CVE-2025-53882 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2025-7514

A vulnerability was found in code-projects Modern Bag 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/contact-list.php. The manipulation of the argument idStatus leads to sql injection. The attack may be launched remotely. The exploit ha...

CVE-2025-7596

The CVE-2025-7596 entry affects Tenda FH1205 (version 2.0.0.7(775)). The vulnerability resides in the function formWifiExtraSet (file /goform/WifiExtraSet) where manipulation of the wpapsk_crypto argument causes a stack-based buffer overflow. This can be exploited remotely; the exploit has been p...

CVE-2025-7587

A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cover.php. The manipulation of the argument uname/psw leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7544 Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow

A vulnerability was found in Tenda AC1206 15.03.06.23. It has been rated as critical. This issue affects the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. Th...

CVE-2025-7421

A vulnerability was found in Tenda O3V2 1.0.0.123880. It has been rated as critical. This issue affects the function fromMacFilterModify of the file /goform/operateMacFilter of the component httpd. The manipulation of the argument mac leads to stack-based buffer overflow. The attack may be...

cmctl-2.3.0-1.1 on GA media (moderate)

cmctl-2.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15336-1 Rating: moderate Cross-References: CVE-2025-53547 CVSS scores: CVE-2025-53547 SUSE : 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H CVE-2025-53547 SUSE : 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H...

git-2.50.1-1.1 on GA media (moderate)

git-2.50.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15337-1 Rating: moderate Cross-References: CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 CVSS scores: CVE-2025-27613 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N...

xen-4.20.1_02-1.1 on GA media (moderate)

xen-4.20.102-1.1 on GA media Announcement ID: openSUSE-SU-2025:15342-1 Rating: moderate Cross-References: CVE-2025-27465 CVSS scores: CVE-2025-27465 SUSE : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2025-27465 SUSE : 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

k9s-0.50.7-2.1 on GA media (moderate)

k9s-0.50.7-2.1 on GA media Announcement ID: openSUSE-SU-2025:15338-1 Rating: moderate Cross-References: CVE-2025-53547 CVSS scores: CVE-2025-53547 SUSE : 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H CVE-2025-53547 SUSE : 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H...

CVE-2025-7177

A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/editcar-washpoint.php. The manipulation of the argument wpid leads to sql injection. The attack may be launched remotel...

MozillaFirefox-140.0.2-1.1 on GA media (moderate)

MozillaFirefox-140.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15325-1 Rating: moderate Cross-References: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6427 CVE-2025-6428 CVE-2025-6429 CVE-2025-6430 CVE-2025-6431 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436...

go1.24-1.24.5-1.1 on GA media (moderate)

go1.24-1.24.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:15329-1 Rating: moderate Cross-References: CVE-2025-4674 CVSS scores: CVE-2025-4674 SUSE : 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2025-4674 SUSE : 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H...

Microsoft Patch Tuesday, July 2025 Edition

Microsoft today released updates to fix at least 137 security vulnerabilities in its Windows operating systems and supported software. None of the weaknesses addressed this month are known to be actively exploited, but 14 of the flaws earned Microsoft's most-dire "critical" rating, meaning they...

libpoppler-cpp2-25.06.0-1.1 on GA media (moderate)

libpoppler-cpp2-25.06.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15323-1 Rating: moderate Cross-References: CVE-2025-52886 CVSS scores: CVE-2025-52886 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-52886 SUSE : 7.3...

djvulibre-3.5.29-1.1 on GA media (moderate)

djvulibre-3.5.29-1.1 on GA media Announcement ID: openSUSE-SU-2025:15319-1 Rating: moderate Cross-References: CVE-2025-53367 CVSS scores: CVE-2025-53367 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-53367 SUSE : 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:...

Important: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2025-7094

A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. Affected by this issue is the function formBSSetSitesurvey of the file /goform/formBSSetSitesurvey of the component webs. The manipulation of the argument submit-url-ok leads to stack-based buffer overflow. The...

CVE-2025-7177

The CVE-2025-7177 affects PHPGurukul Car Washing Management System 1.0. Affected code is the file /admin/editcar-washpoint.php, where the wpid parameter is directly used in SQL queries, enabling a SQL injection vulnerability. This can be exploited remotely and may lead to unauthorized database ac...

CVE-2025-7168 code-projects Crime Reporting System userlogin.php sql injection

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /userlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...