Security Bulletin: NVIDIA Isaac Launchable - May 2026

NVIDIA has released a software update for NVIDIA® Isaac Launchable. To protect your system, download and install the latest version of Isaac Launchable. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses and thei...

CVE-2025-38614 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38614 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: NVIDIA Triton Inference Server- November 2025

NVIDIA has released a software update for NVIDIA Triton Inference Server. To protect your system, download and install the latest release from the Triton Inference Server Releases page on GitHub and view the Secure Deployment Considerations Guide. Go to NVIDIA Product Security. Details The...

Fedora: Security Advisory (FEDORA-2025-54df0e65ea)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4334 : libpgpool-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4334 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4334-1 [email protected] https://www.debian.org/lts/security/...

EUVD-2021-19363

Malware in sbrugna...

CVE-2025-53936 WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car`

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the personalizacaoselecao.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers...

CVE-2024-36476 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-36476 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56724 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56724 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

PT-2025-9087

Name of the Vulnerable Software and Affected Versions CodeChecker versions through 6.24.5 Description The CodeChecker web server contains an open redirect issue due to insufficient protection against multiple slashes in the URL after the product name. This allows bypassing existing protections,...

CVE-2024-56722 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-56722 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50240 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-50240 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56320

GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to improper authorization of access to the admin "Configuration XML" UI feature, and its associated API. A malicious insider/existing authenticated GoCD user with an existing GoCD...

Potential Vulnerabilities Due to Outdated golang.org/x/crypto Dependency in NanoProxy

A security issue was identified in the NanoProxy project related to the golang.org/x/crypto dependency. The project was using an outdated version of this dependency, which potentially exposed the system to security vulnerabilities that have been addressed in subsequent updates. Impact: The specif...

CVE-2024-47735 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-47735 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

PT-2024-34129

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc3-custom-gd95d9a31aceb Description: The issue is related to a suspicious RCU usage warning in the ip tunnel find function. The per-netns IP tunnel hash table is protected by the RTNL mutex, and ip tunne...

WordPress BuddyForms Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)

Software BuddyForms Type Plugin Vulnerable versions = 2.8.12 Fixed in 2.8.13 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47377 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9418faef5fbf Credits SOPROBRO Required privilege Editor...

firefox security update

128.2.0-1.0.2 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.2.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file 128.2.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.2.0-1 - Update to 128.2.0...

MAL-2024-3778 Malicious code in updated-tricks-v-bucks-generator-free_2023-vvgx9u40 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3773 Malicious code in updated-tricks-v-bucks-generator-free_2023-vfft52 (npm)

--- -= Per source details. Do not edit below this line.=-...