xwayland-24.1.8-1.1 on GA media (moderate)

xwayland-24.1.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15311-1 Rating: moderate Cross-References: CVE-2025-49175 CVE-2025-49176 CVE-2025-49177 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVSS scores: CVE-2025-49175 SUSE : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2025-49175...

traefik2-2.11.26-1.1 on GA media (moderate)

traefik2-2.11.26-1.1 on GA media Announcement ID: openSUSE-SU-2025:15305-1 Rating: moderate Cross-References: CVE-2024-28180 CVE-2024-45338 CVE-2025-22868 CVE-2025-22869 CVE-2025-22871 CVE-2025-22872 CVE-2025-27144 CVE-2025-32431 CVE-2025-47952 CVSS scores: CVE-2024-28180 SUSE : 4.3...

jgit-5.11.0-2.1 on GA media (moderate)

jgit-5.11.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15232-1 Rating: moderate Cross-References: CVE-2023-4759 CVE-2025-4949 CVSS scores: CVE-2023-4759 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-4949 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N Affected...

grafana-11.6.3-1.1 on GA media (moderate)

grafana-11.6.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15226-1 Rating: moderate Cross-References: CVE-2025-1088 CVE-2025-3415 CVSS scores: CVE-2025-1088 SUSE : 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L CVE-2025-1088 SUSE : 5.1...

CVE-2025-38192

In the Linux kernel, the following vulnerability has been resolved: net: clear the dst when changing skb protocol A not-so-careful NAT46 BPF program can crash the kernel if it indiscriminately flips ingress packets from v4 to v6: BUG: kernel NULL pointer dereference, address: 0000000000000000...

CVE-2025-38202

In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcureadlocktraceheld in bpfmaplookuppercpuelem bpfmaplookuppercpuelem helper is also available for sleepable bpf program. When BPF JIT is disabled or under 32-bit host, bpfmaplookuppercpuelem will not be inlined. Using...

Park

This project is used to study the...

BELL-CVE-2025-38105

Bulletin has no description...

PT-2025-27843 · WordPress · Wp Human Resource Management

Name of the Vulnerable Software and Affected Versions: WP Human Resource Management plugin versions 2.0.0 through 2.2.17 Description: The issue is related to missing authorization in the ajax insert employee and update employee functions. This allows authenticated attackers with Employee-level...

Oracle Linux 10 : kernel (ELSA-2025-9079)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9079 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Ubuntu: Security Advisory (USN-7608-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-38098

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in createvalidatestreamforsink Don't try to operate on a drmwbconnector as an amdgpudmconnector. While dereferencing aconnector-base will "work" it's wrong and might lead to...

CVE-2025-38143

In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wledconfigure devmkasprintf returns NULL when memory allocation fails. Currently, wledconfigure does not check for this case, which results in a NULL pointer dereference. Add NULL check after...

CVE-2025-40722

creationtimestamp| type| source ---|---|--- 2025-07-03 15:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2yvotrck2q...

CVE-2025-38157

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Abort software beacon handling if disabled A malicious USB device can send a WMISWBAEVENTID event from an ath9khtc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver...

CVE-2025-49618

creationtimestamp| type| source ---|---|--- 2025-07-03 12:58:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114789416665464308 2025-08-06 13:54:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:23+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...

CVE-2025-38111

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...

CVE-2025-38172

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primary and extra devices should be the same type. erofsinitdevice has already guaranteed that if the primary is a file-backed device, extra devic...

Bootstrap Unsupported Version

The installation of Boostrap detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. No source data...

Ubuntu: Security Advisory (USN-7607-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...