3296 matches found
Security Vulnerabilities fixed in Firefox ESR 115.26 — Mozilla
On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. On arm64, a WASM brtable instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrec...
ALSA-2025:11534 Important: git security update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...
CVE-2025-53832 @translated/lara-mcp vulnerable to command injection in import_tmx tool
Lara Translate MCP Server is a Model Context Protocol MCP Server for Lara Translate API. Versions 0.0.11 and below contain a command injection vulnerability which exists in the @translated/lara-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to...
Ubuntu: Security Advisory (USN-7654-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4245-1 libcommons-fileupload-java - security update
Bulletin has no description...
ALSA-2025:11456 Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 kernel: net: ch9200: fix uninitialised access during...
MAL-2025-6055 Malicious code in @toptal/picasso-paper (npm)
The package communicates with a domain associated with malicious activity...
MINI-4297-56C8-4579
Bulletin has no description...
GHSA-F29H-PXVX-F335 eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...
RHSA-2025:10861 Red Hat Security Advisory: java-1.8.0-openjdk security update
Bulletin has no description...
CVE-2025-53945 apko has incorrect permission (0666) in /etc/ld.so.cache and other files
apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prior to version 0.29.5, critical files were inadvertently set to 0666, which could likely be abused for root escalation. Version 0.29.5 contains a fix for the issue...
Mattermost has Insufficiently Protected Credentials
Mattermost versions 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to send synchronization payloads to the server that originally created the invite via the REST API...
RHSA-2025:11381 Red Hat Security Advisory: tomcat security update
Bulletin has no description...
RHSA-2025:11332 Red Hat Security Advisory: tomcat9 security update
Bulletin has no description...
RHSA-2025:11298 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2025:11299 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
BELL-CVE-2025-40918
Bulletin has no description...
BELL-CVE-2025-53906
Bulletin has no description...