24863 matches found
CVE-2025-37097
A vulnerability exists in HPE Insight Remote Support (IRS) versions prior to v7.15.0.646 involving the stopHPRSMain method. The flaw stems from the use of features without proper restrictions, which may allow an unauthenticated malicious actor to trigger a service failure, resulting in a denial o...
HPE Insight Remote Support ๅฎๅ จๆผๆด
HPE Insight Remote Support is a software for improving server availability from HPE America. A security vulnerability exists in versions prior to HPE Insight Remote Support v7.15.0.646, which stems from a potential denial of service...
CVE-2025-37099: Improper Control of Generation of Code
A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37097: Exposed Dangerous Method or Function
A vulnerability in HPE Insight Remote Support IRS prior to v7.15.0.646 may allow an unauthenticated denial of service...
python3 security update
3.6.8-70.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-70 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-981...
HPE Insight Remote Support ๅฎๅ จๆผๆด
HPE Insight Remote Support is a software for improving server availability from HPE America. A security vulnerability exists in versions prior to HPE Insight Remote Support v7.15.0.646, which stems from a vulnerability that could lead to remote code execution...
CVE-2025-37098: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
HPE Insight Remote Support ๅฎๅ จๆผๆด
HPE Insight Remote Support is a software for improving server availability from HPE America. A security vulnerability exists in versions prior to HPE Insight Remote Support v7.15.0.646 that stems from vulnerability to path traversal attacks...
SUSE CVE-2025-38084
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, splitvma triggers hugetlb page table unsharing through vmops-maysplit. This happens before the VMA lock and rmap locks are taken - which is too early, it...
PT-2025-27482 ยท D Link ยท D-Link Dcs-7517ย +1
Name of the Vulnerable Software and Affected Versions: D-Link DCS-6517 versions up to 2.02.0 D-Link DCS-7517 versions up to 2.02.0 Description: A vulnerability was found in the function generate pass from mac of the file /bin/httpd of the component Root Password Generation Handler. The manipulati...
American Fuzzy Lop plus plus 4.33c
Google's American Fuzzy Lop is a brute-force fuzzer coupled with an exceedingly simple but rock-solid instrumentation-guided genetic algorithm. afl++ is a superior fork to Google's afl. It has more speed, more and better mutations, more and better instrumentation, custom module support, etc...
The vulnerability of the FontFaceSet interface in Mozilla Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure.
The vulnerability of the FontFaceSet interface in Mozilla Firefox and Firefox ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
Oracle Linux 8 : libblockdev (ELSA-2025-9878)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9878 advisory. 2.28-7.0.1 - enable btrfs support Orabug: 30792917 2.28-7 - Don't allow suid and dev set on fs resize CVE-2025-6019 Resolves: RHEL-96034 Tenable has extracted t...
libblockdev security update
2.28-7.0.1 - enable btrfs support Orabug: 30792917 2.28-7 - Don't allow suid and dev set on fs resize CVE-2025-6019 Resolves: RHEL-96034...
CLSA-2025-1751042683 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysรฉn Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CVE-2025-36004
IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i. A malicious actor could cause user-controlled code to run with administrator privilege...
SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2025:02121-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02121-1 advisory. Update to version 3.18.3: builddeps: bump golang.org/x/crypto from 0.38.0 to 0.39.0 6838ebc dependabotbot fix: user username...
Oracle Linux 10 : java-21-openjdk (ELSA-2025-7508)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7508 advisory. 1:21.0.7.0.6-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.7.0.6-1 - Update to jdk-21.0.7+6 GA - Update release notes to 21.0.7+6 - Rebase...
Oracle Linux 10 : libblockdev (ELSA-2025-9328)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9328 advisory. 3.2.0-4.0.1 - enable btrfs support Orabug: 30792917 3.2.0-4 - Don't allow suid and dev set on fs resize - CVE-2025-6019 Tenable has extracted the preceding...
I added support for ALT Linux OVAL content in Linux Patch Wednesday
I added support forALT Linux OVAL contentin Linux Patch Wednesday. Now I track when specific CVEs were fixed in ALT Linux packages and take that into account when generating the monthly bulletins. The more data sources on patched vulnerabilities in Linux distributions are used, the more accurate...