CVE-2025-48824

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...

PT-2025-28649 · Git +4 · Git +4

Name of the Vulnerable Software and Affected Versions: Git versions prior to 2.43.7 Git versions prior to 2.44.4 Git versions prior to 2.45.4 Git versions prior to 2.46.4 Git versions prior to 2.47.3 Git versions prior to 2.48.2 Git versions prior to 2.49.1 Git versions prior to 2.50.1 Descriptio...

GLSA-202507-09 : Git: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202507-09 Git: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

Unbreakable Enterprise kernel security update

5.15.0-309.180.4.2 - Add Zen34 clients Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - Add normal counters Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350...

kernel security update

5.14.0-570.25.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

PT-2025-28244 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - WikiHiero Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

Unbreakable Enterprise kernel security update

6.12.0-100.28.2.2.el10uek - Add Zen34 clients Borislav Petkov AMD Orabug: 38129827 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips Orabug: 38129827 CVE-2024-36350 CVE-2024-36357 - Add normal counters Borislav Petkov AMD Orabug: 38129827...

python311-requests-2.32.4-1.1 on GA media (moderate)

python311-requests-2.32.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15281-1 Rating: moderate Cross-References: CVE-2024-47081 CVSS scores: CVE-2024-47081 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-47081 SUSE : 8.2...

traefik2-2.11.26-1.1 on GA media (moderate)

traefik2-2.11.26-1.1 on GA media Announcement ID: openSUSE-SU-2025:15305-1 Rating: moderate Cross-References: CVE-2024-28180 CVE-2024-45338 CVE-2025-22868 CVE-2025-22869 CVE-2025-22871 CVE-2025-22872 CVE-2025-27144 CVE-2025-32431 CVE-2025-47952 CVSS scores: CVE-2024-28180 SUSE : 4.3...

PT-2025-27885 · Unknown · Amazewp Fluxtore

Name of the Vulnerable Software and Affected Versions: amazewp fluXtore versions 1.6.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For amazewp...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.8.1. Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An...

RHSA-2025:10103 Red Hat Security Advisory: microcode_ctl security update

Bulletin has no description...

python3.11 security update

3.11.11-2.1 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 - Resolves: RHEL-98045, RHEL-98015, RHEL-98238, RHEL-98177, RHEL-98206...

CVE-2025-53099 Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered with Sentry can take advantage of a race condition and improper handling of authorization code within Sentry to maintain persistence to a...

python3.12 security update

3.12.11-1 - Update to 3.12.11 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98040, RHEL-98010, RHEL-97808, RHEL-98070, RHEL-98213...

Fedora: Security Advisory (FEDORA-2025-ddcd03b103)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:02146-1 Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059195 fixes one issue. The following security issue was fixed: - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream bsc1238730...

SUSE-SU-2025:02134-1 Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024133 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing...

[SECURITY] [DSA 5949-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5949-1 [email protected] https://www.debian.org/security/ Aron Xu June 26, 2025 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

ALSA-2025:9634 Moderate: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: net/http:...