CVE-2025-3522

Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to determine file size, and navigates to it when the user clicks the attachment. Because the URL is not validate...

SUSE-SU-2025:1336-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.1 - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web content bsc1240962 - CVE-2025-24208: permissions issue may lead to a cross-site scripting attack when loading a...

BELL-CVE-2025-22020

Bulletin has no description...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-088 (ALASKERNEL-5.10-2025-088)

The version of kernel installed on the remote host is prior to 5.10.235-227.919. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-088 advisory. In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev...

OPENSUSE-SU-2025:15009-1 libmozjs-128-0-128.9.0-2.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.9.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15008-1 govulncheck-vulndb-0.0.20250416T165455-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250416T165455-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15007-1 gio-branding-upstream-2.84.1-2.1 on GA media

These are all security issues fixed in the gio-branding-upstream-2.84.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15005-1 MozillaFirefox-137.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-137.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15006-1 argocd-cli-2.14.10-1.1 on GA media

These are all security issues fixed in the argocd-cli-2.14.10-1.1 package on the GA media of openSUSE Tumbleweed...

Apple iOS < 18.4.1 Multiple Vulnerabilities (122282)

Binary data appleios1841check.nbin...

openSUSE Security Advisory (SUSE-SU-2025:1226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15002-1 libmozjs-115-0-115.15.0-5.1 on GA media

These are all security issues fixed in the libmozjs-115-0-115.15.0-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15001-1 forgejo-10.0.3-2.1 on GA media

These are all security issues fixed in the forgejo-10.0.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15000-1 MozillaThunderbird-128.9.2-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15004-1 subfinder-2.7.0-2.1 on GA media

These are all security issues fixed in the subfinder-2.7.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15003-1 perl-32bit-5.40.2-1.1 on GA media

These are all security issues fixed in the perl-32bit-5.40.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-30721

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: UDF. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to...

CVE-2025-30722

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2025-21577

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2025-21583

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.4.0 and 9.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...