OPENSUSE-SU-2025:14918-1 warewulf4-4.6.0-2.1 on GA media

These are all security issues fixed in the warewulf4-4.6.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14917-1 nodejs-electron-33.4.6-1.1 on GA media

These are all security issues fixed in the nodejs-electron-33.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-4JWC-W2HC-78QV vulnerabilities

Vulnerabilities for packages: buck2, wash, parseable, qdrant, atuin, wadm...

CVE-2019-13029

Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...

CVE-2025-22228

A flaw was found in the spring-security-core password encoder. This vulnerability allows incorrect password matching via input manipulation. Mitigation Red Hat Product Security does not have a recommended mitigation at this time...

GHSA-8VGW-P6QM-5GR7 Flask-CORS allows for inconsistent CORS matching

A vulnerability in corydolphin/flask-cors version 5.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The request.path is passed through the unquoteplus function, which converts the '+' character to a space ' '. This behavior leads to incorrect path...

CVE-2024-8024

A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading to sensitive information exposure. Properly implementing a restrictive CORS policy is crucial to prevent such securit...

CVE-2024-7039

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

GHSA-P4QJ-763M-FFG3 vulnerabilities

Vulnerabilities for packages: clamav...

GHSA-P53J-G8PW-4W5F vulnerabilities

Vulnerabilities for packages: gradle, jenkins, thingsboard...

Slackware Linux 15.0 / current libarchive Multiple Vulnerabilities (SSA:2025-079-01)

The version of libarchive installed on the remote host is prior to 3.7.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-079-01 advisory. New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

OPENSUSE-SU-2025:14912-1 mercurial-6.9.4-1.1 on GA media

These are all security issues fixed in the mercurial-6.9.4-1.1 package on the GA media of openSUSE Tumbleweed...

Google Chrome < 134.0.6998.117 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 134.0.6998.117. It is, therefore, affected by multiple vulnerabilities as referenced in the 202503stable-channel-update-for-desktop19 advisory. - CVE-2025-2476 is a use after free in Lens. It was reported by SungKwon Lee ...

SUSE SLES15 Security Update : kernel (Live Patch 49 for SLE 15 SP3) (SUSE-SU-2025:0961-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0961-1 advisory. This update for the Linux Kernel 5.3.18-15030059179 fixes several issues. The following security issues were fixed: - CVE-2024-46818:...

OPENSUSE-SU-2025:14913-1 python311-Django-5.1.7-1.1 on GA media

These are all security issues fixed in the python311-Django-5.1.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14914-1 python311-joblib-1.4.2-2.1 on GA media

These are all security issues fixed in the python311-joblib-1.4.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14915-1 tomcat10-10.1.39-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.39-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14916-1 xorg-x11-server-21.1.15-3.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.15-3.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2025:0962-1 Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002325 fixes several issues. The following security issues were fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fillframeinfo bsc1235452. - CVE-2024-50302: HID: core: zero-initialize the report buffer bsc1233679...

SUSE-SU-2025:0961-1 Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059179 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpioid before used as array index bsc1231204. - CVE-2024-50302: HID: core: zero-initialize the report buffer bsc1233679...