CVE-2024-6696

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses reads and/or writes to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad becau...

SUSE SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2025:0623-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0623-1 advisory. grafana was updated from version 10.4.13 to 10.4.15: - Security issues fixed: CVE-2024-45339: Fixed vulnerability when creating l...

SUSE-SU-2025:0645-1 Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122201 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes bsc1227320. - CVE-2021-47511: ALSA: pcm: oss: fix negative period/buffer sizes bsc1227700. -...

CVE-2025-0728

creationtimestamp| type| source ---|---|--- 2025-02-21 11:25:05+00:00| seen| https://t.me/cvedetector/18637 2025-02-21 11:26:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liop3rgr4g2p 2025-02-21 12:35:18+00:00| seen| Telegram/JmZL6HfJEWDyKx7kicaSOJ8gP19bpGfV75hu0-viSdkUO978...

SUSE-SU-2025:0623-1 Security update for grafana

This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: - Security issues fixed: CVE-2024-45339: Fixed vulnerability when creating log files bsc1236559 CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration bsc1236734 CVE-2025-21613:...

openSUSE 15 Security Update : java-17-openj9 (openSUSE-SU-2025:0067-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0067-1 advisory. - Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine - Including Oracle October 2024 and January 2025 CPU changes CVE-2024-21208...

Medium: squid

Issue Overview: Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks...

CVE-2025-0868

creationtimestamp| type| source ---|---|--- 2025-02-20 14:49:35+00:00| seen| https://t.me/cvedetector/18542 2025-02-20 15:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limlaauq6h2y 2025-02-20 23:26:54+00:00| seen| Telegram/YcLyfgjxS8wFVsXueB-Fpx0MMnYTtaDaq1jL96EujmeZ3VmW...

RUSTSEC-2025-0007 *ring* is unmaintained

The author has announced an indefinite hiatus in its development, noting that any reported security vulnerabilities may go unaddressed for prolonged periods of time. Update: security maintenance only After this advisory was published, the author graciously agreed to give access to the rustls team...

SUSE-SU-2025:0603-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35863: smb: client: fix potential UAF in isvalidoplockbreak bsc1224763. - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in...

CVE-2024-37361

creationtimestamp| type| source ---|---|--- 2025-02-20 01:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114033695657281184 2025-02-20 02:16:30+00:00| seen| https://t.me/cvedetector/18488 2025-02-20 02:26:12+00:00| seen|...

qt6-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 11 security bugs in Chromium: CVE-2024-11477: 7-Zip Zstd decompression integer underflow CVE-2025-0762: Use after free in DevTools CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0998: Out of bounds memory access in V8...

grub2-2.12-35.1 on GA media (moderate)

grub2-2.12-35.1 on GA media Announcement ID: openSUSE-SU-2025:14822-1 Rating: moderate Cross-References: CVE-2024-45774 CVE-2024-45775 CVE-2024-45776 CVE-2024-45777 CVE-2024-45778 CVE-2024-45779 CVE-2024-45780 CVE-2024-45781 CVE-2024-45782 CVE-2024-45783 CVE-2024-56737 CVE-2025-0622 CVE-2025-0624...

Photon OS 5.0: Openssh PHSA-2025-5.0-0475

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0475. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

OPENSUSE-SU-2025:0067-1 Security update for java-17-openj9

This update for java-17-openj9 fixes the following issues: - Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine - Including Oracle October 2024 and January 2025 CPU changes CVE-2024-21208 boo1231702, CVE-2024-21210 boo1231711, CVE-2024-21217 boo1231716, CVE-2024-21235 boo1231719,...

Duplicate Advisory: Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vvfq-8hwr-qm4m. This link is maintained to preserve external references. Original Description Summary Nokogiri v1.18.3 upgrades its dependency libxml2 to v2.13.6. libxml2 v2.13.6 addresses: - CVE-2025-24928 -...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

SUSE-SU-2025:0591-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250211 release bsc1237096 - CVE-2024-31068: Improper Finite State Machines FSMs in Hardware Logic for some Intel Processors may allow privileged user to potentially enable denial of service via loca...

BELL-CVE-2025-1125

Bulletin has no description...

CVE-2024-13443

creationtimestamp| type| source ---|---|--- 2025-02-19 04:19:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liiwbw66gt2y 2025-02-19 07:52:23+00:00| seen| https://t.me/cvedetector/18405 2025-02-19 08:07:06+00:00| seen|...