Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2025.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.1-IF002 and IBM Business Automation Insights 24.0.0-IF003 Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client...

MGASA-2025-0146 Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.88 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

Updated tomcat packages fix security vulnerabilities

DoS via malformed HTTP/2 PRIORITYUPDATE frame. CVE-2025-31650 Bypass of rules in Rewrite Valve. CVE-2025-31651...

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.88 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

MGASA-2025-0145 Updated tomcat packages fix security vulnerabilities

DoS via malformed HTTP/2 PRIORITYUPDATE frame. CVE-2025-31650 Bypass of rules in Rewrite Valve. CVE-2025-31651...

chromedriver-136.0.7103.59-1.1 on GA media (moderate)

chromedriver-136.0.7103.59-1.1 on GA media Announcement ID: openSUSE-SU-2025:15051-1 Rating: moderate Cross-References: CVE-2025-4050 CVE-2025-4051 CVE-2025-4052 CVE-2025-4096 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These a...

Android Automotive OS Update Bulletin—May 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-05-05 or later from the May 2025 Android Security Bulletin in addition to all issues in this...

openSUSE Security Advisory (SUSE-SU-2025:1436-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 4.0: Frr PHSA-2025-4.0-0789

An update of the frr package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0789. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid23514...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.13 (RHSA-2025:4437)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4437 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

Android Security Bulletin—May 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Pixel Update Bulletin—May 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2025-05-05 or later address all issues in this bulletin and all issues in the May 2025 Android Security...

CVE-2021-1931

creationtimestamp| type| source ---|---|--- 2025-05-04 23:00:05+00:00| published-proof-of-concept| Telegram/kH2UXWtUrIpizMyzG2Re6WqFSBMK8XBuA3Zsl5G-RY2gsk 2025-05-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujowevjz2h 2026-04-04 18:31:04+00:00| seen|...

nuclei-templates

Nuclei Templates Community curated list of templates for the nu...

CVE-2025-4244

creationtimestamp| type| source ---|---|--- 2025-05-03 20:18:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14706 2025-05-03 20:39:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loc72wmnlch2 2025-05-03...

Security Bulletin: Security vulnerabilities addressed with IBM Business Automation Workflow container updates in April 2025

Summary Multiple security vulnerabilities are addressed with IBM Business Automation Workflow containers updates in April 2025. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the...

BELL-CVE-2025-37796

Bulletin has no description...

Security Bulletin: Additional security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for April 2025.

Summary In addition to vulnerabilities announced in Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation...

CVE-2023-53093

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings, stacktraces, graphs, symbols, syscalls, or grouped in buckets or log. Give an error if a value is set to do so. Note, the histogram cod...

CVE-2025-37798

In the Linux kernel, the following vulnerability has been resolved: codel: remove sch-q.qlen check before qdisctreereducebacklog After making all -qlennotify callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fqcodeldequeue and codelqdiscdequeue...