Ubuntu: Security Advisory (USN-7686-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Alibaba Cloud Linux 3 : 0124: unbound (ALINUX3-SA-2025:0124)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0124 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-5994: A multi-vendor cache poisoning...

Alibaba Cloud Linux 3 : 0127: sqlite (ALINUX3-SA-2025:0127)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0127 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLi...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1729)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA86361 PE vulnerability in Microsoft Server Software

An elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to execute arbitrary code, gain privileges. Original advisories CVE-2025-53786 Related products Microsoft-Exchange-Server CVE list CVE-2025-53786 critical KB list 5050674...

Alibaba Cloud Linux 3 : 0128: go-toolset:an8 (ALINUX3-SA-2025:0128)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0128 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-45336: The HTTP client drops...

Alibaba Cloud Linux 3 : 0130: grafana-pcp (ALINUX3-SA-2025:0130)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0130 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-22871: The net/http package improperly...

Alibaba Cloud Linux 3 : 0134: java-1.8.0-openjdk (ALINUX3-SA-2025:0134)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0134 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-30749: Vulnerability in the Oracl...

SUSE: Security Advisory (SUSE-SU-2025:02657-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Junos OS Vulnerability (JSA100050)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA100050 advisory. - A Use After Free vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP upda...

Ubuntu: Security Advisory (USN-7685-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-54873 RISC Zero Underconstrained Vulnerability: Division

RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. RISC packages risc0-zkvm versions 2.0.0 through 2.1.0 and risc0-circuit-rv32im and risc0-circuit-rv32im-sys versions 2.0.0 through 2.0.4 contain vulnerabilities where signed...

CERTFR-2025-ALE-011

creationtimestamp| type| source ---|---|--- 2025-08-05 14:14:27+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lvnvfrpi552u 2025-08-05 14:14:41+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114976573294128741...

CLSA-2025-1754382809 Update of nss

update to CKBI 2.78 from NSS 3.113 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...

CLSA-2025-1754381826 microcode_ctl: Fix of 8 CVEs

Update Intel CPU microcode to 20250512 release, addresses CVE-2025-20012, CVE-2025-24495, CVE-2024-43420, CVE-2025-20623, CVE-2024-45332, CVE-2024-28956, CVE-2025-20103, CVE-2025-20054: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003f7; - Addition of...

CLSA-2025-1754381806 Fix of 8 CVEs

New microcode update packages from upstream up to 2025-05-12: - New microcodes: sig 0x000a06d1, pfmask 0x20, 2025-02-07, rev 0xa0000d1, size 1635328 sig 0x000a06d1, pfmask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 sig 0x000b0650, pfmask 0x80, 2025-03-18, rev 0x000a, size 136192 sig 0x000b06d1...

CLSA-2025-1754381695 Fix of 8 CVEs

New microcode update packages from upstream up to 2025-05-12: - New microcodes: sig 0x000a06d1, pfmask 0x20, 2025-02-07, rev 0xa0000d1, size 1635328 sig 0x000a06d1, pfmask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 sig 0x000b0650, pfmask 0x80, 2025-03-18, rev 0x000a, size 136192 sig 0x000b06d1...

CLSA-2025-1754381655 microcode_ctl: Fix of 6 CVEs

Update Intel CPU microcode to 20250512: - Fixes CVE-2025-20012, CVE-2025-20623, CVE-2025-24495, CVE-2024-28956 CVE-2024-43420, CVE-2024-45332 - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003f7; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in...

CVE-2025-54387 IPX is Vulnerable to Path Traversal via Prefix Matching Bypass

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...

PT-2025-31950

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.23 and earlier Description Adobe Experience Manager is susceptible to an Improper Restriction of XML External Entity Reference 'XXE' issue. Successful exploitation of this issue could allow an attacker to...