Authorization Bypass

org.springframework.security, spring-security-core is vulnerable to Authorization Bypass. The vulnerability is due to improper method security annotation detection due to issues in locating annotations on parameterized types or methods, allowing an attacker to access methods or resources without...

OPENSUSE-SU-2025:14953-1 ghostscript-10.05.0-1.1 on GA media

These are all security issues fixed in the ghostscript-10.05.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14957-1 libtheora-devel-1.2.0-1.1 on GA media

These are all security issues fixed in the libtheora-devel-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14949-1 GraphicsMagick-1.3.45-2.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.45-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14960-1 perl-Data-Entropy-0.8.0-1.1 on GA media

These are all security issues fixed in the perl-Data-Entropy-0.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14951-1 aws-efs-utils-2.2.1-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14952-1 expat-2.7.1-1.1 on GA media

These are all security issues fixed in the expat-2.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14959-1 libsaml-devel-3.3.1-2.1 on GA media

These are all security issues fixed in the libsaml-devel-3.3.1-2.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : mozilla -- multiple vulnerabilities (1a67144d-0d86-11f0-8542-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1a67144d-0d86-11f0-8542-b42e991fc52e advisory. [email protected] reports: An inconsistent comparator in xslt/txNodeSorter could have...

Ubuntu: Security Advisory (USN-7402-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14950-1 assimp-devel-5.4.3-5.1 on GA media

These are all security issues fixed in the assimp-devel-5.4.3-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14955-1 govulncheck-vulndb-0.0.20250331T171002-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250331T171002-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7407-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7407-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

OPENSUSE-SU-2025:14956-1 headscale-0.25.1-2.1 on GA media

These are all security issues fixed in the headscale-0.25.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14954-1 gotosocial-0.18.3-2.1 on GA media

These are all security issues fixed in the gotosocial-0.18.3-2.1 package on the GA media of openSUSE Tumbleweed...

USN-7403-1: Linux kernel (HWE) vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. CVE-2024-8805 Attila Szász discovered that the HFS+ file system...

USN-7402-2: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - GPU drivers; - HID subsystem; - Media drivers; - JFS file system; - Network namespace; -...

GO-2025-3581 github.com/jaredallard/archives Has Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

github.com/jaredallard/archives Has Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

USN-7401-1: Linux kernel (AWS) vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

USN-7392-3: Linux kernel (AWS) vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...