CVE-2020-26224

In PrestaShop before version 1.7.6.9 an attacker is able to list all the orders placed on the website without being logged by abusing the function that allows a shopping cart to be recreated from an order already placed. The problem is fixed in 1.7.6.9...

SUSE SLES15 / openSUSE 15 Security Update : iperf (SUSE-SU-2025:0291-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0291-1 advisory. - Update to version 3.18 - CVE-2024-53580: Fixed a segmentation violation via the iperfexchangeparameters function. bsc1234705 Tenable has...

trivy-0.58.2-1.1 on GA media (moderate)

trivy-0.58.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14713-1 Rating: moderate Cross-References: CVE-2024-3817 CVE-2024-45337 CVE-2024-45338 CVE-2025-21613 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-45338 SUSE : 5.9...

Advisory ROSA-SA-2025-2653

software: libbacktrace 1.0 WASP: ROSA-CHROME packageevrstring: libbacktrace-1.0-1.gitcdb64b.3 CVE-ID: CVE-2023-28198 BDU-ID: 2023-04538 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the macOS operating system WebKit web page display module is associated with a post-release exploit error...

DSA-5851-1 openjpeg2 - security update

Bulletin has no description...

SUSE-SU-2025:0235-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.26+4 January 2025 CPU Security fixes: - CVE-2025-21502: Enhance array handling JDK-8330045, bsc1236278 Other changes: - JDK-8224624: Inefficiencies in CodeStrings::addcomment cause - timeouts - JDK-822504...

DLA-4026-1 tiff - security update

Bulletin has no description...

govulncheck-vulndb-0.0.20250115T172141-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250115T172141-1.1 on GA media Announcement ID: openSUSE-SU-2025:14653-1 Rating: moderate Cross-References: CVE-2024-51491 CVE-2024-52281 CVE-2024-53263 CVE-2024-56138 CVE-2024-56323 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be...

python311-translate-toolkit-3.14.5-1.1 on GA media (moderate)

python311-translate-toolkit-3.14.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:14647-1 Rating: moderate Cross-References: CVE-2021-28957 CVSS scores: CVE-2021-28957 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

SUSE-SU-2025:0103-1 Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122201 fixes several issues. The following security issues were fixed: - CVE-2022-48686: Fixed UAF when detecting digest errors bsc1226337. - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. -...

CVE-2025-21365

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:23:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpunkwfs52n 2025-01-14 19:51:54+00:00| seen|...

CVE-2025-21189

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpucqpthk2n 2025-01-14 18:26:00+00:00| seen|...

CVE-2025-21329

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpulm5in42b 2025-01-15 01:11:33+00:00| seen|...

operator-sdk-1.39.0-1.1 on GA media (moderate)

operator-sdk-1.39.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14634-1 Rating: moderate Cross-References: CVE-2024-45338 CVE-2025-21614 CVSS scores: CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-45338 SUSE : 8.2...

valkey-8.0.2-1.1 on GA media (moderate)

valkey-8.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14638-1 Rating: moderate Cross-References: CVE-2024-46981 CVE-2024-51741 CVSS scores: CVE-2024-46981 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-46981 SUSE : 8.7...

DLA-4010-1 python-django - security update

Bulletin has no description...

CVE-2024-11842 DN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRF

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

chromedriver-131.0.6778.204-1.1 on GA media (moderate)

chromedriver-131.0.6778.204-1.1 on GA media Announcement ID: openSUSE-SU-2024:14607-1 Rating: moderate Cross-References: CVE-2024-12692 CVE-2024-12693 CVE-2024-12694 CVE-2024-12695 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description:...

mpg123:1.32.9 security update

1.32.9-1 - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 1.26.2-6 - Add patch for CVE-2024-10573 Resolves: RHEL-65445...

tailscale-1.78.3-2.1 on GA media (moderate)

tailscale-1.78.3-2.1 on GA media Announcement ID: openSUSE-SU-2024:14602-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...