govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media Announcement ID: openSUSE-SU-2025:15059-1 Rating: moderate Cross-References: CVE-2019-11243 CVE-2023-32198 CVE-2024-22031 CVE-2025-23390 CVE-2025-32777 CVE-2025-3879 CVE-2025-4166 CVE-2025-4210 CVE-2025-46327 CVE-2025-46342 CVE-2025-46569...

edk2 security update

An update is available for edk2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list EDK Embedded Development Kit is a project to enable UEFI support for Virtual...

RLSA-2024:3178 Important: linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel: Protection mechanism failure for some IntelR PROSet/Wireless WiFi CVE-2022-46329 hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory...

RLSA-2024:4256 Important: less security update

The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fixes: less: OS command injection...

WordPress WPshop 2 plugin 2.0.0-2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation

Insecure Direct Object Reference to Authenticated Subscriber+ Arbitrary User Key Generation vulnerability discovered by kr0d in WordPress Plugin WP shop versions 2.0.0-2.6.0...

grafana-11.5.4-1.1 on GA media (moderate)

grafana-11.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15052-1 Rating: moderate Cross-References: CVE-2024-6104 CVE-2025-2703 CVE-2025-29923 CVE-2025-30204 CVE-2025-3454 CVSS scores: CVE-2024-6104 SUSE : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2025-2703 SUSE : 6.3...

WordPress User Registration plugin <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion vulnerability

Insecure Direct Object Reference to Unauthenticated Limited User Deletion vulnerability discovered by wesley wcraft in WordPress Plugin User Registration versions = 4.2.1...

nilfs2: protect access to buffers with no active references

...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-4087 firefox: thunderbird: Process isolation bypass using...

CLSA-2025-1746188001 expat: Fix of CVE-2024-8176

CVE-2024-8176: fix stack overflow vulnerability when parsing deeply nested entity references...

CLSA-2025-1746187509 expat: Fix of CVE-2024-8176

CVE-2024-8176: fix stack overflow vulnerability when parsing deeply nested entity references...

CLSA-2025-1746187414 expat: Fix of CVE-2024-8176

CVE-2024-8176: fix stack overflow vulnerability when parsing deeply nested entity references...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the uaudio driver not handling user space references correctly, which could lead to a deadlock...

MozillaThunderbird-128.10.0-1.1 on GA media (moderate)

MozillaThunderbird-128.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15042-1 Rating: moderate Cross-References: CVE-2025-2817 CVE-2025-4082 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093 CVSS scores: CVE-2025-2817 SUSE : 7.8...

WordPress plugin Homey 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-49914 btrfs: fix inode list leak during backref walking at resolve_indirect_refs()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at resolveindirectrefs During backref walking, at resolveindirectrefs, if we get an error we jump to the 'out' label and call ulistfree on the 'parents' ulist, which frees all the...

CVE-2022-49914 btrfs: fix inode list leak during backref walking at resolve_indirect_refs()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at resolveindirectrefs During backref walking, at resolveindirectrefs, if we get an error we jump to the 'out' label and call ulistfree on the 'parents' ulist, which frees all the...

WordPress WordPress Simple PayPal Shopping Cart plugin <= 5.1.3 - Insecure Direct Object Reference vulnerability

Insecure Direct Object Reference vulnerability discovered by Jack Taylor in WordPress Plugin Simple Shopping Cart versions = 5.1.3...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a leak in the inode list in the btrfs resolveindirectrefs error path, which could lead to a memory leak...

Sematell ReplyOne 安全漏洞

Sematell ReplyOne is an artificial intelligence-based reply management software from Sematell. A security vulnerability exists in Sematell ReplyOne version 7.4.3.0, which stems from insufficient permissions on the /rest/sessions endpoint and could lead to unsafe direct object references...