CVE-2025-27042

CVE-2025-27042 is a memory corruption vulnerability in Qualcomm video handling. The affected area is the Qualcomm video pipeline when processing video packets from the video firmware, with a root cause described as memory corruption. CVSS 3.1 base score 7.8 (HIGH) indicates local attack vector, l...

SUSE-SU-2025:02249-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL bsc1228557. - CVE-2024-49568: net/smc: check v2extoffset/eidcnt/ismgidcnt when...

RHEL 9 : kernel-rt (RHSA-2025:10536)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10536 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

APSB25-59 : Security update available for Adobe InCopy

Adobe has released a security update for Adobe InCopy. This update addresses critical vulnerabilities that could lead to arbitrary code execution...

GLSA-202507-09 : Git: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202507-09 Git: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

APSB25-65 : Security update available for Adobe Illustrator

Adobe has released an update for Adobe Illustrator. This update resolves critical and important vulnerabilities. Successful exploitation could lead to application denial-of-service, arbitrary code execution, and memory leak...

CVE-2025-6713

CVE-2025-6713 affects MongoDB Server: versions before 8.0.7 (8.0.x), 7.0 before 7.0.19, and 6.0 before 6.0.22 are vulnerable due to improper handling of the $mergeCursors stage in aggregation pipelines. An unauthorized user can potentially access data without proper authorization through crafted ...

Impact Of CVE-2025-32462, CVE-2025-32463 On Ivanti EPMM and Sentry

Created Date Jul 7, 2025 8:33:20 AM...

BELL-CVE-2025-38198

Bulletin has no description...

CVE-2025-45479

CVE-2025-45479 affects educoder challenges version 1.0, where created containers lack sufficient security controls. The underlying issue allows an attacker to execute arbitrary code by injecting crafted content into a container, leading to a high-severity impact (C, I, A = HIGH) per CVSS 3.1. In ...

RHEL 8 : xorg-x11-server (RHSA-2025:10342)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10342 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

RHEL 9 : python3.9 (RHSA-2025:10399)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10399 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

incus-6.14-1.1 on GA media (moderate)

incus-6.14-1.1 on GA media Announcement ID: openSUSE-SU-2025:15317-1 Rating: moderate Cross-References: CVE-2025-52889 CVE-2025-52890 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

glibc security update

2.34-168.0.1.20 - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi Oracle history: June-9-2025 Cupertino Miranda - 2.34-168.0.1.19 - Forward-port Oracle patches for ol9-u6 Reviewed-by: David Faust May-17-2025 Cupertino Miranda - 2.34-168.0.1.14 - Forward-port Oracle patches fo...

Android Security Bulletin—July 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-07-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Android Automotive OS Update Bulletin—July 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-07-05 or later from the July 2025 Android Security Bulletin in addition to all issues in this...

MozillaThunderbird-128.12.0-1.1 on GA media (moderate)

MozillaThunderbird-128.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15312-1 Rating: moderate Cross-References: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6429 CVE-2025-6430 CVSS scores: CVE-2025-6424 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-6424 SUSE : 8....

PT-2025-29084

Name of the Vulnerable Software and Affected Versions: OpenSynergy BlueSDK aka Blue SDK versions through 6.x Description: The vulnerability resides within the BlueSDK Bluetooth stack and is due to a use-after-free condition. This flaw occurs because of a lack of validation to confirm the existenc...

Updated php packages fix security vulnerabilities

PGSQL: Fixed GHSA-hrwm-9436-5mv3 pgsql extension does not check for errors during escaping. CVE-2025-1735 SOAP: Fixed GHSA-453j-q27h-5p8x NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix. CVE-2025-6491 Standard: Fixed GHSA-3cr5-j632-f35r Null byte termination in...

Updated catdoc packages fix security vulnerabilities

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in the xls2csv utility version 0.95. CVE-2024-48877 An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. CVE-2024-52035 An integer...