12583 matches found
RUSTSEC-2025-0008 Openh264 Decoding Functions Heap Overflow Vulnerability
OpenH264 recently reported a heap overflow that was fixed in upstream 63db555 and integrated into our 0.6.6 release. For users relying on Cisco's pre-compiled DLL, we also published 0.8.0, which is compatible with their latest fixed DLL version 2.6.0. In other words: - if you rely on our source...
RHSA-2025:1756 Red Hat Security Advisory: mysql security update
Bulletin has no description...
OPENSUSE-SU-2025:14832-1 libprotobuf-lite28_3_0-28.3-15.1 on GA media
These are all security issues fixed in the libprotobuf-lite2830-28.3-15.1 package on the GA media of openSUSE Tumbleweed...
Wireshark Security Update (wnpa-sec-2025-01) - Windows
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
DLA-4066-1 fort-validator - security update
Bulletin has no description...
SUSE-SU-2025:0659-1 Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-26465: Fixed a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client bsc1237040. - Add a s390 specific ioctl for ECC hardware support bsc1225637: - for migration to openssh 8.4: write active/enabled switch over files only if n...
OPENSUSE-SU-2025:0072-1 Security update for radare2
This update for radare2 fixes the following issues: - CVE-2025-1378: Fixed memory corruption boo1237250 https://github.com/radareorg/radare2/releases/tag/5.9.0 Update to version 5.8.8: For details, check full release notes Faster analysis, type matching, binary parsing 2-4x Add assembler for risc...
SUSE-SU-2025:0615-1 Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.17: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093...
RHSA-2025:1739 Red Hat Security Advisory: postgresql:15 security update
Bulletin has no description...
RHSA-2025:1732 Red Hat Security Advisory: libpq security update
Bulletin has no description...
RHSA-2025:1725 Red Hat Security Advisory: libpq security update
Bulletin has no description...
RHSA-2025:1724 Red Hat Security Advisory: postgresql:13 security update
Bulletin has no description...
RHSA-2025:1723 Red Hat Security Advisory: postgresql:13 security update
Bulletin has no description...
PT-2025-7469 · Eclipse · Eclipse Threadx Netx Duo
Name of the Vulnerable Software and Affected Versions: Eclipse ThreadX NetX Duo versions prior to 6.4.2 Description: The issue allows an attacker to cause an integer underflow and a subsequent denial of service by writing a very large file or by sending specially crafted packets with Content-Leng...
PT-2025-16807 · Unknown · Telecontrol Server Basic
Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: A SQL injection vulnerability has been identified in the affected application through the internally used CreateTrace method. This could allow an unauthenticated remote attacker ...
OPENSUSE-SU-2025:14830-1 libxml2-2-2.13.6-1.1 on GA media
These are all security issues fixed in the libxml2-2-2.13.6-1.1 package on the GA media of openSUSE Tumbleweed...
Medium: nginx
Issue Overview: When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...
CVE-2025-27098 Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler in graphql-mesh
GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. Missing check vulnerability in the static file handler allows any...
BIT-DISCOURSE-2024-53266 Cross-site Scripting (XSS) via topic titles when CSP disabled in Discourse
Discourse is an open source platform for community discussion. In affected versions with some combinations of plugins, and with CSP disabled, activity streams in the user's profile page may be vulnerable to XSS. This has been patched in the latest version of Discourse core. Users are advised to...