40302 matches found
Amazon Linux 2 : python-ipaddress (ALAS-2025-2761)
The version of python-ipaddress installed on the remote host is prior to 1.0.16-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2761 advisory. The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as...
Ubuntu: Security Advisory (USN-7297-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] tigervnc
New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/tigervnc/tigervnc-1.12.0-i586-8slack15.0.txz: Rebuilt. Recompiled against xorg-server-1.20.14, including patches for security issues:...
CVE-2025-27139
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cross-site scripting when the preferences page is opened. Versions 2.7.12, 3.1.2, and 3.2.0 fix the issue...
CVE-2025-27139
CVE-2025-27139 affects Combodo iTop (web-based IT service management). The vulnerability is a cross-site scripting issue on the preferences page. Affected versions are earlier than 2.7.12, 3.1.2, and 3.2.0. The issue is mitigated by upgrading to the fixed releases: 2.7.12, 3.1.2, or 3.2.0. No exp...
CVE-2025-27139 Combodo iTop vulnerable to stored self Cross-site Scripting in preferences
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cross-site scripting when the preferences page is opened. Versions 2.7.12, 3.1.2, and 3.2.0 fix the issue...
MGASA-2025-0073 Updated libxml2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Use-after-free in xmlSchemaIDCFillNodeTables. CVE-2024-56171 Stack-buffer-overflow in xmlSnprintfElements. CVE-2025-24928 Null-deref in xmlPatMatch. CVE-2025-27113...
Updated libxml2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Use-after-free in xmlSchemaIDCFillNodeTables. CVE-2024-56171 Stack-buffer-overflow in xmlSnprintfElements. CVE-2025-24928 Null-deref in xmlPatMatch. CVE-2025-27113...
CVE-2025-26600
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...
GHSA-57CQ-JGQ2-X7VG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-P9VW-XW86-3F2W vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
GHSA-QWVH-X5GW-88V2 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MJVJ-G3G8-7G76 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-P87X-PPH3-GHM8 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-RHF6-X9HH-7359 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-3625-3V8Q-96PC vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-3GX9-7V2H-VCXW vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-Q4QV-28J2-P7M2 vulnerabilities
Vulnerabilities for packages: mysql...