CVE-2025-3408

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product...

CVE-2025-3337

A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/memberupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The...

govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media Announcement ID: openSUSE-SU-2025:14970-1 Rating: moderate Cross-References: CVE-2025-0312 CVE-2025-23391 CVE-2025-29072 CVE-2025-29868 CVE-2025-30223 CVE-2025-31135 CVSS scores: CVE-2025-23391 SUSE : 9.1...

CVE-2025-3237

CVE-2025-3237 affects Tenda FH1202 (version 1.2.0.14(408)). The vulnerability stems from improper access control when handling the file /goform/wrlwpsset, allowing a remote attacker to exploit it. Multiple sources corroborate remote exploitation and public disclosure of the exploit. The reports d...

firefox-esr-128.9.0-1.1 on GA media (moderate)

firefox-esr-128.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14961-1 Rating: moderate Cross-References: CVE-2025-2783 CVE-2025-2857 CVE-2025-3028 CVE-2025-3029 CVE-2025-3030 CVSS scores: CVE-2025-3028 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2025-3029 SUSE : 7.3...

CVE-2025-3164

A vulnerability was found in Tencent Music Entertainment SuperSonic up to 0.9.8. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/semantic/database/testConnect of the component H2 Database Connection Handler. The manipulation leads to code...

CVE-2025-3151

CVE-2025-3151 affects SourceCodester Gym Management System v1.0. The vulnerability is in the signup.php endpoint, where manipulation of the user_name argument enables SQL injection. It can be exploited remotely and has been disclosed publicly. Multiple sources describe it as critical/high impact,...

headscale-0.25.1-2.1 on GA media (moderate)

headscale-0.25.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:14956-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...

ghostscript-10.05.0-1.1 on GA media (moderate)

ghostscript-10.05.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14953-1 Rating: moderate Cross-References: CVE-2025-27830 CVE-2025-27831 CVE-2025-27832 CVE-2025-27833 CVE-2025-27834 CVE-2025-27835 CVE-2025-27836 CVE-2025-27837 CVSS scores: CVE-2025-27830 SUSE : 5...

perl-Data-Entropy-0.8.0-1.1 on GA media (moderate)

perl-Data-Entropy-0.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14960-1 Rating: moderate Cross-References: CVE-2025-1860 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

govulncheck-vulndb-0.0.20250331T171002-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250331T171002-1.1 on GA media Announcement ID: openSUSE-SU-2025:14955-1 Rating: moderate Cross-References: CVE-2024-12055 CVE-2024-12886 CVE-2025-0315 CVE-2025-0317 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed...

expat-2.7.1-1.1 on GA media (moderate)

expat-2.7.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14952-1 Rating: moderate Cross-References: CVE-2024-8176 CVSS scores: CVE-2024-8176 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-8176 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affect...

CVE-2025-3007

A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation of the argument cmd/netmask/pipeout/nettask leads to stack-based buffer overflow...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-1337)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

atop-2.11.1-1.1 on GA media (moderate)

atop-2.11.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14945-1 Rating: moderate Cross-References: CVE-2025-31160 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the atop-2.11.1-1.1...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-1329)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

upx-5.0.0-2.1 on GA media (moderate)

upx-5.0.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:14947-1 Rating: moderate Cross-References: CVE-2025-2849 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the upx-5.0.0-2.1 package o...

CVE-2025-2978

A vulnerability was found in WCMS 11. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php?articleadmin/upload/?&CKEditor=container&CKEditorFuncNum=1 of the component Article Publishing Page. The manipulation of the argument Upload leads to...

CVE-2025-2920

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

rke2-1.32.3+rke2r1-1.1 on GA media (moderate)

rke2-1.32.3+rke2r1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14941-1 Rating: moderate Cross-References: CVE-2025-1974 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...