26380 matches found
Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7167-2)
The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7167-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
Security Vulnerabilities fixed in Thunderbird ESR 128.6 — Mozilla
The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. Assuming a controlled failed memory allocation, an attacker could have caused...
Pixel Update Bulletin—January 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2025-01-05 or later address all issues in this bulletin and all issues in the January 2025 Android...
Mozilla Firefox ESR < 128.6
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-02 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5,...
USN-7159-5 linux-raspi-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - S390 architecture; - x86 architecture; - Power management core; - GPU...
Security Bulletin: Security Vulnerabilities in node.js packages affect IBM Voice Gateway
Summary Security Vulnerabilities in node.js packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to...
Android Security Bulletin-January 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
Android Automotive OS Update Bulletin—January 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-01-05 or later from the January 2025 Android Security Bulletin in addition to all issues in thi...
Intel® NUC Software Advisory
Summary: Summary: Potential security vulnerabilities in some Intel® NUC Software may allow escalation of privilege, denial of service, and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28737...
Pixel Watch Security Bulletin—January 2026Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2026-01-01 or later address all issues in this bulletin and all issues in the January 2026 Android Security Bulletin and all...
CVE-2025-0230
creationtimestamp| type| source ---|---|--- 2025-01-05 21:08:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113777792683424943 2025-01-05 21:36:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/140 2025-01-05 21:47:24+00:00| seen|...
Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API
Details have emerged about three now-patched security vulnerabilities in Dynamics 365 and Power Apps Web API that could result in data exposure. The flaws, discovered by Melbourne-based cybersecurity company Stratus Security, have been addressed as of May 2024. Two of the three shortcomings resid...
CVE-2024-56262
creationtimestamp| type| source ---|---|--- 2025-01-02 12:21:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2tyuxa22a 2025-01-02 12:42:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ler3zporn52r 2025-01-02 14:14:57+00:00| seen|...
CVE-2024-37451
creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2pncp252i 2025-01-02 17:23:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113759918648604937...
CVE-2024-56038
creationtimestamp| type| source ---|---|--- 2025-01-02 09:38:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113758091123971661 2025-01-02 10:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leqtts4qgv2i 2025-01-02 10:42:35+00:00| seen|...
velero-1.15.1-1.1 on GA media (moderate)
velero-1.15.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14613-1 Rating: moderate Cross-References: CVE-2024-45337 CVE-2024-45338 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabiliti...
DLA-4008-1 linux-6.1 - security update
Bulletin has no description...
BELL-CVE-2024-56625
Bulletin has no description...