Security Bulletin: IBM Rational Build Forge 8.0.x is affected by Apache HTTP Server version used in it. (CVE-2021-31618, CVE-2020-13950, CVE-2019-17567, CVE-2020-26691, CVE-2021-26690, CVE-2020-13938, CVE-2021-30641, CVE-2020-35452)

Summary IBM Rational Build Forge version 8.0.x is affected by CVE-2021-31618, CVE-2020-13950, CVE-2019-17567, CVE-2020-26691, CVE-2021-26690, CVE-2020-13938, CVE-2021-30641, CVE-2020-35452 Vulnerability Details CVEID:CVE-2021-31618 DESCRIPTION: Apache HTTP Server is vulnerable to a denial of...

Security Vulnerabilities fixed in Firefox ESR 115.23 — Mozilla

Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file...

DLA-4142-1 libraw - security update

Bulletin has no description...

Security Vulnerabilities fixed in Thunderbird 138 — Mozilla

Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations...

Mozilla Thunderbird < 138.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 138.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-31 advisory. - Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. So...

SUSE SLES15 Security Update : kernel RT (Live Patch 5 for SLE 15 SP6) (SUSE-SU-2025:1387-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1387-1 advisory. This update for the Linux Kernel 6.4.0-1506001017 fixes several issues. The following security issues were fixed: - CVE-2024-53237: Bluetooth:...

Updated chromium-browser-stable packages fix security vulnerabilities

Heap buffer overflow in Codecs. CVE-2025-3619 Use after free in USB. CVE-2025-3620...

MGASA-2025-0140 Updated chromium-browser-stable packages fix security vulnerabilities

Heap buffer overflow in Codecs. CVE-2025-3619 Use after free in USB. CVE-2025-3620...

Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.

Summary IBM CICS TX Advanced is impacted by security vulnerabilities found in packages GLib2.0, libxml2, glibc , krb5 Kerberos, libtasn1-6, Expat, OpenSSL, GnuTLS and curl. These are shipped as part of the product. Vulnerability Details CVEID:CVE-2024-12133 DESCRIPTION: A flaw in libtasn1 causes...

CVE-2025-4039

creationtimestamp| type| source ---|---|--- 2025-04-28 08:14:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114414586655301204 2025-04-28 22:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13749 2025-04-28 23:45:40+00:00| seen|...

The API Imperative: Securing Agentic AI and Beyond

We recently released The Rise of Agentic AI, our API ThreatStats report for Q1 2025, finding that evolving API threats are fueled by the rise of agentic AI systems, growing complexity in cloud-native infrastructure, and a surge in software supply chain risks, and uncovered patterns and actionable...

Debian dla-4140 : gir1.2-soup-2.4 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4140 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4140-1 [email protected]...

libxslt security update

1.1.28-6.0.3 - Fix CVE-2024-55549 issue due to memory leak Orabug: 37795485 - Fix CVE-2025-24855 issue due to use after free...

opentofu-1.9.1-1.1 on GA media (moderate)

opentofu-1.9.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15030-1 Rating: moderate Cross-References: CVE-2024-45336 CVE-2024-45341 CVE-2025-22866 CVSS scores: CVE-2024-45336 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-45341 SUSE : 4.2...

MGASA-2025-0139 Updated libxml2 packages fix security vulnerabilities

CVE-2025-32414 Buffer overflow when parsing text streams with Python API CVE-2025-32415 Heap-based Buffer Overflow in xmlSchemaIDCFillNodeTables...

Updated libxml2 packages fix security vulnerabilities

CVE-2025-32414 Buffer overflow when parsing text streams with Python API CVE-2025-32415 Heap-based Buffer Overflow in xmlSchemaIDCFillNodeTables...

CVE-2025-46616

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13390 2025-04-25 07:12:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmobfwqrcz2 2025-04-25 08:20:18+00:00| seen|...

java-11-openjdk-11.0.27.0-1.1 on GA media (moderate)

java-11-openjdk-11.0.27.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15022-1 Rating: moderate Cross-References: CVE-2025-21587 CVE-2025-30691 CVE-2025-30698 CVSS scores: CVE-2025-21587 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-21587 SUSE : 9.1...

java-21-openjdk-21.0.7.0-1.1 on GA media (moderate)

java-21-openjdk-21.0.7.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15024-1 Rating: moderate Cross-References: CVE-2025-21587 CVE-2025-30691 CVE-2025-30698 CVSS scores: CVE-2025-21587 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-21587 SUSE : 9.1...

USN-7462-1 linux-aws, linux-aws-5.4, linux-gcp-5.4, linux-iot vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...