CarlinKit CPC200-CCPA 数据伪造问题漏洞

The CarlinKit CPC200-CCPA is a wireless CarPlay and Android Auto adapter from CarlinKit. The CarlinKit CPC200-CCPA suffers from a Data Forgery Issue vulnerability that stems from a failure to validate cryptographic signatures during USB update packet processing, which could lead to arbitrary code...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:1359-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1359-1 advisory. - Update to version 0.0.20250416T165455 2025-04-16T16:54:55Z. jscPED-11136: GO-2025-3595 - Update to version 0.0.20250410T162706...

OPENSUSE-SU-2025:15019-1 libxml2-2-2.13.8-1.1 on GA media

These are all security issues fixed in the libxml2-2-2.13.8-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-17635

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege v...

Fedora 40 : trafficserver (2025-3467f5b68d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3467f5b68d advisory. Resolves CVE-2024-53868 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : moodle (2025-edd8ed2afc)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-edd8ed2afc advisory. Latest updates. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

PT-2025-17662 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 17.7 through 17.9.6 GitLab EE versions 17.10 through 17.10.4 GitLab EE versions 17.11 through 17.11.0 Description: An issue has been discovered in access controls that could allow users to view certain restricted project...

PT-2025-17705 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.7 through 17.9.7 GitLab CE/EE versions 17.10 through 17.10.5 GitLab CE/EE versions 17.11 through 17.11.1 Description: An issue has been discovered affecting service availability via issue preview in GitLab CE/EE. The...

SUSE-SU-2025:20196-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

Security update for helm

This update for helm fixes the following issues: Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: check...

PT-2025-17547 · Centreon · Centreon Bam

Name of the Vulnerable Software and Affected Versions: Centreon BAM versions 23.04 through 23.04.9 Centreon BAM versions 23.10 through 23.10.9 Centreon BAM versions 24.04 through 24.04.4 Centreon BAM versions 24.10 through 24.10.0 Description: The issue is related to an SQL Injection vulnerabilit...

This Week in Spring - April 22nd, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring , which I'm writing from magnificent Minneapolis, Minnesota, where I'm recording an amazing Frontend Masters course introducing Spring Boot. I love this article introducing Spring AI in JavaPro magazine Want to run an LLM...

CGA-FPFG-F2F6-G9M4

Bulletin has no description...

[SECURITY] Fedora 41 Update: rust-icu_provider-1.5.0-1.fc41

Trait and struct definitions for the ICU data provider...

CVE-2024-38428

creationtimestamp| type| source ---|---|--- 2025-04-21 11:02:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12639 2025-07-08 07:10:38+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2025-07-08 07:10:48+00:00| seen|...

CVE-2025-43964

In LibRaw before 0.21.4, tag 0x412 processing in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values...

Fedora 40 : python-pydantic-core / rust-adblock / rust-cookie_store / etc (2025-e923d51676)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e923d51676 advisory. Update uv to 0.6.14, with various bugfixes and new features. Update rust-idna to 1.0.3 fixing RUSTSEC-2024-0421, rust-url to 2.5.4, rust- adblock to 0.9.6, a...

Fedora 41 : jupyterlab / python-notebook (2025-e15a193ad3)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e15a193ad3 advisory. New jupyterlab and notebook Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

openSUSE 15 Security Update : coredns (openSUSE-SU-2025:0131-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0131-1 advisory. - Update to version 1.12.1: core: Increase CNAME lookup limit from 7 to 10 7153 plugin/kubernetes: Fix handling of pods having DeletionTimestamp set...