CVE-2025-2443

An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-5121

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group...

CVE-2025-49976 WordPress WANotifier plugin <= 2.7.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WANotifier WANotifier allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WANotifier: from n/a through 2.7.7...

CVE-2024-7586

An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, where webhook deletion audit log preserved auth credentials...

SUSE-SU-2025:02050-1 Security update for python39

This update for python39 fixes the following issues: python39 was updated from version 3.9.21 to version 3.9.23: - Security issues fixed: CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS bsc1243273 CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-451...

CVE-2022-50014

In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix FOLLFORCE COW security issue and remove FOLLCOW Ever since the Dirty COW CVE-2016-5195 security issue happened, we know that FOLLFORCE can be possibly dangerous, especially if there are races that can be exploited by...

CVE-2025-32875

An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither initiated nor enforced by the application itself. Also, the watch does not enforce pairing and bonding. As a result, any data transmitted via BLE remains unencrypted, allowing...

openSUSE Security Advisory (SUSE-SU-2025:01988-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: ansible-operator-fips, datadog-agent, pypy-3.11, py3-pip, dask-gateway, py3-cassandra-medusa, kubeflow-katib, nemo, openstack-kolla-toolbox-2025.1, azure-functions-host, py3-hashin, kubeflow-jupyter-web-app, openstack-kolla-toolbox-2025.2, barman, ansible-operator,...

CVE-2022-50208

In the Linux kernel, the following vulnerability has been resolved: soc: amlogic: Fix refcount leak in meson-secure-pwrc.c In mesonsecurepwrcprobe, there is a refcount leak in one fail path...

SUSE: Security Advisory (SUSE-SU-2025:01983-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Operationalize Cloud Security in Zendesk: Wiz Now Available on the Zendesk Marketplace

Streamline remediation by delivering prioritized security issues straight to Zendesk...

GHSA-8QVM-5X2C-J2W7 vulnerabilities

Vulnerabilities for packages: kserve...

GHSA-8QVM-5X2C-J2W7 vulnerabilities

Vulnerabilities for packages: request-1276, nemo, text-generation-inference, awx, spamcheck, kserve, ghidra...

GHSA-22V5-Q59J-H85M vulnerabilities

Vulnerabilities for packages: chromium...

SUSE-SU-2025:01990-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 for building bsc1236516 CVE-2025-22870: Bump golang.org/x/net to version 0.39.0 bsc1238686 - Version was updated to 2.53.4 with the following bug fixes:...

GHSA-22V5-Q59J-H85M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X573-8WX6-VHF4 vulnerabilities

Vulnerabilities for packages: chromium...

Veeam Backup and Replication 12.x < 12.3.2.3617 Multiple Vulnerabilities (June 2025) (KB4743)

The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.2.3617. It is, therefore, affected by multiple vulnerabilities: - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user. CVE-2025-23121 - A...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Requests vulnerabilities (USN-7568-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7568-1 advisory. Dennis Brinkrolf and Tobias Funke discovered that Requests did not correctly...