CVE-2025-38608 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38608 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

PT-2025-40308

Name of the Vulnerable Software and Affected Versions risc0-zkvm-platform versions 2.0.2 and below risc0-aggregation versions below 0.9 risc0-zkos-v1compat versions below 2.1.0 risc0-zkvm versions 3.0.0-rc.1 through 3.0.1 Description The software contains a flaw related to memory safety in the sy...

Debian dsa-6015 : libcrypto3-udeb - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6015 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6015-1 [email protected]...

RHEL 8 : OpenShift Container Platform 4.18.25 (RHSA-2025:16729)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16729 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

Debian dla-4316 : open-vm-tools - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4316 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4316-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4317 : libjson-xs-perl - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4317 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4317-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 4262-2] libcommons-lang-java regression update

Debian LTS Advisory DLA-4262-2 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 30, 2025 https://wiki.debian.org/LTS Package : libcommons-lang-java Version : 2.6-9+deb11u2 CVE ID : CVE-2025-48924 A regression has been discovered in the latest release...

Security Bulletin: IBM OpenPages for IBM Cloud Pak for Data is Vulnerable to Spring Web Unsafe Deserialization [CVE-2016-1000027]

Summary There is a vulnerability called potential remote code execution RCE in the Spring Web open source library used by IBM OpenPages for IBM Cloud Pak for Data. This vulnerability has been addressed. CVE-2016-1000027 Vulnerability Details CVEID:CVE-2016-1000027 DESCRIPTION: Pivotal Spring...

CVE-2025-11137

A vulnerability has been found in Gstarsoft GstarCAD up to 9.4.0. This affects an unknown function of the component File Renaming Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Applying a...

Debian dla-4314 : internetarchive - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4314 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4314-1 [email protected] https://www.debian.org/lts/security/...

Advisory ROSA-SA-2025-3027

software: jasper 2.0.33 WASP: ROSA-CHROME unaffected versions = jasper-2.0.33-2 affected versions jasper-2.0.33-2 CVE-ID: CVE-2025-8835 BDU-ID: None CVE-Crit: LOW CVE-DESC.: A vulnerability in JasPer before version 4.2.5 allows a crash due to null pointer dereferencing in the jasimagechclrspc...

[SECURITY] [DLA 4305-2] firefox-esr regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4305-2 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 29, 2025 https://wiki.debian.org/LTS -...

CVE-2025-11137

A vulnerability has been found in Gstarsoft GstarCAD up to 9.4.0. This affects an unknown function of the component File Renaming Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Applying a...

CVE-2025-59844

SonarQube Server and Cloud is a static analysis solution for continuous code quality and security inspection. A command injection vulnerability exists in SonarQube GitHub Action in version 4.0.0 to before version 6.0.0 when workflows pass user-controlled input to the args parameter on Windows...

[SECURITY] [DSA 6012-1] nncp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6012-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 26, 2025 https://www.debian.org/security/faq -...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in h11-0.14.0-py3-none-any.whl

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of h11-0.14.0-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-43859 DESCRIPTION: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding...

Apache Airflow: Connection sensitive details exposed to users with READ permissions

Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values. In Airflow 3.0.3, this model was...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.57 security and extras update

Red Hat OpenShift Container Platform release 4.14.57 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

PT-2025-39450

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R versions through V9.4.0cu.1458 B20250708 Description A flaw exists in TOTOLINK X6000R that allows for OS Command Injection due to improper neutralization of special elements used in an OS command. This could allow an attacker t...

Debian dsa-6010 : chromium - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6010 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6010-1 [email protected]...