PT-2025-17852 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to improper sanitization of SVG files, which allows client-side script injection in deployed applications. This can potentially lead to security breaches...

Ubuntu: Security Advisory (USN-7451-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-17635

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege v...

GO-2025-3630 GoBGP does not properly check the input length in github.com/osrg/gobgp

GoBGP does not properly check the input length in github.com/osrg/gobgp...

GO-2025-3604 Mattermost Fails to Enforce Proper Access Controls on `/api/v4/audits` Endpoint in github.com/mattermost/mattermost-server

Mattermost Fails to Enforce Proper Access Controls on /api/v4/audits Endpoint in github.com/mattermost/mattermost-server...

CVE-2025-1951

creationtimestamp| type| source ---|---|--- 2025-04-22 15:03:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12866 2025-04-22 15:52:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114382415652361250 2025-04-22 15:56:49+00:00| seen|...

Memory release followed by re-exploitation vulnerability in several Apple products

visionOS is an AR eyewear system announced by Apple on June 6, 2023 at the 2023 Apple Worldwide Developers Conference, which will be featured for the first time in the Apple Vision Pro. tvOS is an iOS-based television operating system developed by Apple. watchOS is a set of watch operating system...

kissin977.com Cross Site Scripting vulnerability OBB-4047813

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

RHEL 8 : kernel-rt (RHSA-2025:3894)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3894 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 8 / 9 : java-17-openjdk (RHSA-2025:3852)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3852 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security...

Fedora: Security Advisory (FEDORA-2025-e923d51676)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: webkitgtk-2.48.1-2.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

ffmpeg-6-6.1.2-3.1 on GA media (moderate)

ffmpeg-6-6.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15010-1 Rating: moderate Cross-References: CVE-2023-22656 CVE-2023-45221 CVE-2023-47169 CVE-2023-47282 CVE-2023-48368 CVE-2023-51793 CVE-2023-51798 CVE-2024-12361 CVE-2024-35365 CVE-2024-35368 CVE-2025-0518 CVE-2025-22919...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-3slack15.0.txz: Rebuilt. This update fixes security issues: schemas: Fix heap buffer overflow in...

CVE-2025-39735

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the "sizecheck" label in eaget, the code checks if the extended attribute list xattr size matches easize. If not, it logs "eaget: invalid extended attribute" and calls printhexdump...

CGA-VHJF-WC37-HFWX

Bulletin has no description...

BELL-CVE-2025-22056

Bulletin has no description...

CVE-2025-25427

creationtimestamp| type| source ---|---|--- 2025-04-18 02:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln2mk6hd7c2u 2025-04-18 03:00:28+00:00| published-proof-of-concept| Telegram/l8rpmt9IEsaMir73BEzPWVwPlbkzU9EJpZeQ9myt0c4T-pE 2025-04-18 04:52:31+00:00| seen|...

MozillaFirefox-137.0.2-1.1 on GA media (moderate)

MozillaFirefox-137.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15005-1 Rating: moderate Cross-References: CVE-2025-3608 CVSS scores: CVE-2025-3608 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-3608 SUSE : 7.7...