USN-7238-3: Linux kernel (Low Latency) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; - VMware vSockets driver; CVE-2024-53103, CVE-2024-53164...

CVE-2025-1010

creationtimestamp| type| source ---|---|--- 2025-02-04 14:06:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113946000548249701 2025-02-04 14:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheanhavkj2r 2025-02-04 16:23:44+00:00| seen|...

CVE-2025-0890

creationtimestamp| type| source ---|---|--- 2025-02-04 10:16:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113945094769665038 2025-02-04 11:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdwklgkws2t 2025-02-04 11:58:05+00:00| seen|...

CVE-2025-24982

creationtimestamp| type| source ---|---|--- 2025-02-04 04:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113943709406528304 2025-02-04 05:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdcgmverp27 2025-02-04 06:13:47+00:00| seen|...

Pixel Update Bulletin—February 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2025-02-05 or later address all issues in this bulletin and all issues in the February 2025 Android...

Security Vulnerabilities fixed in Firefox ESR 128.7 — Mozilla

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. A bug in WebAssembly code generation could have lead to a cras...

Amazon Linux 2 : runfinch-finch (ALASDOCKER-2025-050)

The version of runfinch-finch installed on the remote host is prior to 1.6.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-050 advisory. 2025-02-12: CVE-2024-51744 was added to this advisory. 2025-02-12: CVE-2024-45338 was added to this advisory...

Mozilla Firefox ESR < 115.20

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.20. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-08 advisory. - Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6,...

SUSE Linux Enterprise Server For SAP SEoL (12.5.x)

According to its version, SUSE Linux Enterprise Server For SAP is 12.5.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

SUSE Linux Enterprise SEoL (15.5.x)

According to its version, SUSE Linux Enterprise is 15.5.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 809...

Security Bulletin: IBM Cloud Pak for Network Automation 2.7.5 addresses multiple security vulnerabilities.

Summary IBM Cloud Pak for Network Automation 2.7.5 addresses multiple security vulnerabilities. Vulnerability Details CVEID:CVE-2024-32879 DESCRIPTION: Python Social Auth Django could allow a remote authenticated attacker to bypass security restrictions, caused by improper handling of case...

MGASA-2025-0033 Updated redis packages fix security vulnerabilities

Redis' Lua library commands may lead to remote code execution. CVE-2024-46981 Redis allows denial-of-service due to malformed ACL selectors. CVE-2024-51741...

Updated redis packages fix security vulnerabilities

Redis' Lua library commands may lead to remote code execution. CVE-2024-46981 Redis allows denial-of-service due to malformed ACL selectors. CVE-2024-51741...

CVE-2025-22703

creationtimestamp| type| source ---|---|--- 2025-02-03 15:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtl45zgp2r 2025-02-03 15:25:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113940649322901756 2025-08-26 18:36:19+00:00| seen|...

USN-7233-3 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Multiple devices driver; - Network drivers; - Mellanox network drivers; - S/390 drivers; - SCSI subsystem; - Sonic...

What Is Attack Surface Management?

Attack surfaces are growing faster than security teams can keep up – to stay ahead, you need to know what's exposed and where attackers are most likely to strike. With cloud adoption dramatically increasing the ease of exposing new systems and services to the internet, prioritizing threats and...

SUSE-SU-2025:0328-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

CVE-2025-20636

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaont2rcx2p 2025-02-03 07:46:47+00:00| seen| https://t.me/cvedetector/17045 2025-02-03 08:03:46+00:00| seen|...

SUSE SLES15: clamav / clamav-devel / clamav-docs-html / clamav-milter / etc (SUSE-SU-2025:0325-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0325-1 advisory. New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a...

Android Security Bulletin-February 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-02-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...