3304 matches found
DLA-4079-1 openvpn - security update
Bulletin has no description...
BIT-KIBANA-2025-25015 Kibana arbitrary code execution via prototype pollution
Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions = 8.15.0 and 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users tha...
CVE-2025-21837
In the Linux kernel, the following vulnerability has been resolved: iouring/uringcmd: unconditionally copy SQEs at prep time This isn't generally necessary, but conditions have been observed where SQE data is accessed from the original SQE after prep has been done and outside of the initial issue...
CVE-2025-21833
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARNONONCE There is a WARNONONCE to catch an unlikely situation when domainremovedevpasid can't find the pasid. In case it nevertheless happens we must avoid using a NULL pointer...
BELL-CVE-2025-22870
Bulletin has no description...
BELL-CVE-2024-58069
Bulletin has no description...
BELL-CVE-2024-58052
Bulletin has no description...
CVE-2025-27670
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014...
CVE-2025-21827
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface says that "the device lock" is needed when the function is called from places other than probe. This appears to be th...
BELL-CVE-2025-27516
Bulletin has no description...
DSA-5875-1 chromium - security update
Bulletin has no description...
DLA-4078-1 firefox-esr - security update
Bulletin has no description...
GHSA-CPWX-VRP4-4PQ7 vulnerabilities
Vulnerabilities for packages: openstack-kolla-toolbox-2025.1-fips, reflex, nemo, jupyter-base-notebook, jupyter-docker-stacks, checkov, tensorflow-cpu-jupyter, openstack-kolla-toolbox-2025.1, text-generation-inference...
CVE-2024-41770
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information...
CVE-2025-1918
Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. Chromium security severity: Medium...
CVE-2024-55064
Multiple cross-site scripting XSS vulnerabilities in EasyVirt DC NetScope = 8.6.4 allow remote attackers to inject arbitrary JavaScript or HTML code via the 1 smtpserver, 2 smtpaccount, 3 smtppassword, or 4 emailrecipients parameter to /smtp/update; the 5 ntp or 6 dns parameter to...
CVE-2025-1936
jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension...
GHSA-8CGQ-6MH2-7J6V vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.4-rack, ruby3.3-rack, ruby3.2-rack, logstash...