24192 matches found
PT-2025-35288
Name of the Vulnerable Software and Affected Versions: Qsync Central versions prior to 4.5.0.7 Description: A path traversal vulnerability exists in Qsync Central. A remote attacker gaining a user account can potentially read the contents of unexpected files or system data. Recommendations: Updat...
SUSE CVE-2025-58050
The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the scs:... Scan SubString verb when combined with...
CLSA-2025-1756409198 wget: Fix of CVE-2024-38428
CVE-2024-38428: fix mishandle semicolons in userinfo subcomponent of URI to prevent insecure behavior...
Stored XSS
Overview FormCMS is a FormCMS is an open-source Content Management System designed to simplify and accelerate web development workflows for CMS projects and general web applications. It streamlines data modeling, backend development, and frontend design, making them as intuitive as filling out a...
python3.11 security update
3.11.13-2.0.1 - Update rpm-macros description Orabug: 36024572 3.11.13-2 - Security fix for CVE-2025-8194 Resolves: RHEL-106338...
SUSE: Security Advisory (SUSE-SU-2025:02986-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CLSA-2025-1756323821 php: Fix of CVE-2025-1736
CVE-2025-1736: fix incorrect validation of CRLF in http headers...
CLSA-2025-1756305640 nodejs: Fix of CVE-2024-28863
CVE-2024-28863: prevent extraction in excessively deep sub-folders to address unlimited sub-folders vulnerability...
openSUSE Security Advisory (SUSE-SU-2025:02978-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2025:15495-1 perl-Crypt-CBC-3.70.0-1.1 on GA media
These are all security issues fixed in the perl-Crypt-CBC-3.70.0-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2025-38676
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length...
Stable Channel Update for Desktop
The Stable channel has been updated to 139.0.7258.154/.155 for Windows, Mac and 139.0.7258.154 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...
RHEL 8 : python-cryptography (RHSA-2025:14553)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:14553 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
CVE-2025-52036
A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=categories. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as o...
ALSA-2025:14546 Moderate: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Important: aide security update
Advanced Intrusion Detection Environment AIDE is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions. Security Fixes: aide: improper output neutralization enables bypassing CVE-2025-54389 For more details abou...
CVE-2025-57809
CVE-2025-57809 affects XGrammar. Prior to 0.1.21, there is an infinite recursion issue in the grammar; this is resolved in version 0.1.21. CVSSv3.1 base score 7.5 (HIGH) with availability impact; CVSS4 base score 8.7 (HIGH) with high availability impact. Remediation: upgrade XGrammar to 0.1.21 or...
kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...
jupyter-bqplot-jupyterlab-0.5.46-12.1 on GA media (moderate)
jupyter-bqplot-jupyterlab-0.5.46-12.1 on GA media Announcement ID: openSUSE-SU-2025:15485-1 Rating: moderate Cross-References: CVE-2025-9287 CVSS scores: CVE-2025-9287 SUSE : 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2025-9287 SUSE : 9.1...