OPENSUSE-SU-2025:14730-1 MozillaFirefox-135.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-135.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-0445 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-1019 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2025-1016

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary cod...

helm-3.17.0-2.1 on GA media (moderate)

helm-3.17.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:14725-1 Rating: moderate Cross-References: CVE-2024-45338 CVSS scores: CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-45338 SUSE : 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:14728-1 govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250130T185858-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14726-1 cargo-audit-advisory-db-20250204-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20250204-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 24.10 : Linux kernel (Low Latency) vulnerabilities (USN-7238-3)

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7238-3 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the...

OPENSUSE-SU-2025:14729-1 python311-scikit-learn-1.6.1-1.1 on GA media

These are all security issues fixed in the python311-scikit-learn-1.6.1-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7234-3)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7234-3 advisory. Ye Zhang and Nicolas Wu discovered that the iouring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL,...

CVE-2025-24643

creationtimestamp| type| source ---|---|--- 2025-02-03 15:18:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbto7v3ox2r 2025-02-03 17:48:47+00:00| seen| https://t.me/cvedetector/17069 2025-02-03 17:55:44+00:00| seen|...

Security update for glibc

This update for glibc fixes the following issues: Fixed security issues: CVE-2024-33602: Use timet for return type of addgetnetgrentX bsc1223425 CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache bsc1223423 CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response...

OPENSUSE-SU-2025:14723-1 google-osconfig-agent-20250115.01-1.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20250115.01-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-2715 · Unknown · Camera Kernel

Name of the Vulnerable Software and Affected Versions: Camera kernel affected versions not specified Description: The issue involves memory corruption that occurs when validating the number of devices in the camera kernel. This corruption can potentially lead to security issues. There is no...

OPENSUSE-SU-2025:14722-1 rime-schema-all-20230603+git.5fdd2d6-3.1 on GA media

These are all security issues fixed in the rime-schema-all-20230603+git.5fdd2d6-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14724-1 grafana-11.3.3-1.1 on GA media

These are all security issues fixed in the grafana-11.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14725-1 helm-3.17.0-2.1 on GA media

These are all security issues fixed in the helm-3.17.0-2.1 package on the GA media of openSUSE Tumbleweed...

CGA-HV7W-45QF-RQXJ

Bulletin has no description...

CVE-2024-13096 WP Finance <= 1.3.6 - Stored XSS via CSRF

The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-13343

creationtimestamp| type| source ---|---|--- 2025-02-01 04:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3npcce7u2h 2025-02-01 05:25:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3712 2025-02-01 05:34:57+00:00| seen|...