CVE-2024-56408

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have no sanitization in the /vendor/phpoffice/phpspreadsheet/samples/Engineering/Convert-Online.php file, which leads to the possibility of a cross-site scripting attack...

RHSA-2025:0012 Red Hat Security Advisory: python-requests security update

Bulletin has no description...

CVE-2022-49035 media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE

In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...

ALSA-2025:0012 Moderate: python-requests security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

QNAP QuTS hero DoS Vulnerability (QSA-23-09)

QNAP QuTS hero is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero";...

PT-2025-26767 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-11339 · Unknown +3 · Ghostscript +3

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified ghostscript affected versions not specified Description: The issue is caused by a buffer overflow resulting from an oversized Type 4 function in a PDF. It is also related to package vulnerabilities...

PT-2025-16899 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.95 Microsoft Edge Chromium-based versions affected versions not specified Description: A heap buffer overflow in Codecs in Google Chrome on Windows allowed a remote attacker to potentially exploit he...

PT-2025-17460

Name of the Vulnerable Software and Affected Versions GNOME Epiphany versions up to 47.4/48.0 Description The issue concerns an external protocol in GNOME Epiphany. Recommendations For versions up to 47.4/48.0, update to a version that contains a fix for this issue...

PT-2025-7619 · Znuny +1 · Znuny +1

Name of the Vulnerable Software and Affected Versions: Znuny versions prior to 7.1.4 Description: An issue was discovered in Znuny where permissions are not checked properly when using the Generic Interface to update ticket metadata. Recommendations: For versions prior to 7.1.4, update to version...

PT-2025-32246 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 139.0.7258.66 Description: A use-after-free issue existed in the Cast functionality within Google Chrome. This allowed a remote attacker to potentially exploit heap corruption through a specially crafted HTML...

PT-2025-42736

Name of the Vulnerable Software and Affected Versions golang versions 1.15 golang versions 1.19 Description The net/url package does not properly validate bracketed IPv6 hostnames. This can lead to issues when parsing URLs containing IPv6 addresses enclosed in brackets. Recommendations Update to ...

CVE-2024-56741

In the Linux kernel, the following vulnerability has been resolved: apparmor: test: Fix memory leak for aaunpackstrdup The string allocated by kmemdup in aaunpackstrdup is not freed and cause following memory leaks, free them to fix it. unreferenced object 0xffffff80c6af8a50 size 8: comm...

CVE-2024-56707 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2dmacflt.c Add error pointer checks after calling otx2mboxgetrsp...

CVE-2024-56507

CVE-2024-56507 : A reflected Cross-Site Scripting (XSS) vulnerability exists in LinkAce prior to version 1.15.6, specifically in the Edit Link module’s URL field where input is reflected in the HTML response. The issue allows injection and execution of arbitrary JavaScript in a victim’s browser, ...

CVE-2024-56507 Reflected Cross-Site Scripting (XSS) Vulnerability in LinkAce

LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a reflected cross-site scripting XSS vulnerability exists in the LinkAce. This issue occurs in the "URL" field of the "Edit Link" module, where user input is not properly sanitized or encoded before bein...

CVE-2024-56361 Stored Cross-Site Scripting (XSS) in lgsl v7.0

LGSL Live Game Server List provides online status for games. Before 7.0.0, a stored cross-site scripting XSS vulnerability was identified in lgsl. The function lgslquery40 in lgslprotocol.php has implemented an HTTP crawler. This function makes a request to the registered game server, and upon...

SUSE-SU-2024:4423-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2024-56378: Fixed out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc bsc1234795...

DSA-5836-1 xen - security update

Bulletin has no description...

PT-2024-35363 · Dell · Dell Supportassist For Business Pcs +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 4.6.1 and prior Dell SupportAssist for Business PCs versions 4.5.0 and prior Description: The software remediation component of Dell SupportAssist contains a symbolic link attack vulnerability. A...