PT-2025-39744

CVE-2025-56714 Cloud-Classroom-PHP-1.0 CVE-2025-56713 Poc 2 - POST /classrooms/loginlin... https://t.co/Dx3zpMS4OH Vulnerability Notification: https://t.co/xhLrNnfyrO...

SUSE SLES15 Security Update : kernel RT (Live Patch 2 for SLE 15 SP7) (SUSE-SU-2025:03318-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03318-1 advisory. This update for the Linux Kernel 6.4.0-15070078 fixes several issues. The following security issues were fixed: - CVE-2025-38498: dochangetype...

SUSE: Security Advisory (SUSE-SU-2025:03268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

govulncheck-vulndb-0.0.20250918T182144-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250918T182144-1.1 on GA media Announcement ID: openSUSE-SU-2025:15566-1 Rating: moderate Cross-References: CVE-2025-47906 CVE-2025-5187 CVSS scores: CVE-2025-47906 SUSE : 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2025-47906 SUSE : 2.1...

Security update for curl

This update for curl fixes the following issues: Security issues fixed: CVE-2025-9086: bug in patch comparison logic when processing cookies can lead to out-of-bounds read in heap buffer bsc1249191. CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server...

tkimg-2.1.0-1.1 on GA media (moderate)

tkimg-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15556-1 Rating: moderate Cross-References: CVE-2025-8851 CVE-2025-9165 CVSS scores: CVE-2025-8851 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-8851 SUSE : 4.8...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-2174)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-37990

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.11.2 Description A flaw exists in WatchGuard Fireware OS related to improper input handling during web page generation, potentially leading to Stored Cross-site Scripting XSS. This issue is prese...

Fedora 43 : exiv2 (2025-c23727e694)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c23727e694 advisory. Exiv2 0.28.6 + patch to fix silent abi breakage ---- Exiv2 v0.28.6 Fixes two low severity CVEs Tenable has extracted the preceding description block...

Fedora 43 : cups (2025-3596273b51)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3596273b51 advisory. 2.4.14 fixes CVE-2025-58060 and CVE-2025-58364 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0343-1 Rating: important References: 1249388 Cross-References: CVE-2025-10200 CVE-2025-10201 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes two vulnerabilities is now available...

chromedriver-140.0.7339.127-1.1 on GA media (moderate)

chromedriver-140.0.7339.127-1.1 on GA media Announcement ID: openSUSE-SU-2025:15548-1 Rating: moderate Cross-References: CVE-2025-10200 CVE-2025-10201 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0344-1 Rating: important References: 1249388 Cross-References: CVE-2025-10200 CVE-2025-10201 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes two vulnerabilities is now available...

kernel-devel-6.16.6-1.1 on GA media (moderate)

kernel-devel-6.16.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15544-1 Rating: moderate Cross-References: CVE-2024-53093 CVE-2025-38216 CVSS scores: CVE-2024-53093 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2025-38216 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L...

SUSE SLES12 Security Update : kernel (Live Patch 68 for SLE 12 SP5) (SUSE-SU-2025:03143-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03143-1 advisory. This update for the Linux Kernel 4.12.14-122258 fixes several issues. The following security issues were fixed: - CVE-2025-38000: schhfsc: Fix...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RLSA-2025:14900 Moderate: python39:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Security update for 7zip (moderate)

openSUSE Security Update: Security update for 7zip Announcement ID: openSUSE-SU-2025:0339-1 Rating: moderate References: 1246706 1246707 1249130 Cross-References: CVE-2025-53816 CVE-2025-53817 CVSS scores: CVE-2025-53816 SUSE: 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N...

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...