SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2025:3858-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3858-1 advisory. - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal...

EUVD-2025-36675

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, DecodeCiscat implementation does not check the return the value of cJSONGetObjectItem for a possible NULL value in case of an error. A compromised agent can cause a crash of analysisd by...

Squashfs: fix uninit-value in squashfs_get_parent

...

vhost: vringh: Fix copy_to_iter return value check

...

vhost: vringh: Modify the return value check

...

pinctrl: check the return value of pinmux_ops::get_function_name()

...

bus: fsl-mc: Check return value of platform_get_resource()

...

CVE-2025-61128

Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi...

Tenda O3 SetValue GetValue DoS

The vulnerability of the SetValue and GetValue functions /goform/sysAutoReboot of the Tenda O3 wireless access points’ microprogramming software is related to the operation of the parameter “enable” when the data is stored outside of the buffer in memory. Exploiting this vulnerability could allow...

Wazuh code issues and vulnerabilities

Wazuh is a Wazuh open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. A code issue vulnerability exists in Wazuh versions prior to 4.11.0 that stems from not checking the ctimer return...

Floragunn Search Guard FLX security vulnerability

Floragunn Search Guard FLX is a security component for protecting Elastic Search from Floragunn, Germany. A security vulnerability exists in Floragunn Search Guard FLX 3.1.1 and earlier versions, which stems from improper implementation of field-level security rules for object value fields, which...

PT-2025-44277

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s sch qfq scheduler within the agg dequeue function net/sched/sch qfq.c. A null dereference could occur when cl-qdisc-ops-peekcl-qdisc returns NULL,...

Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-42070)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store validation for NFTDATAVALUE is conditional, however, the datatype is always either NFTDATAVALUE or NFTDATAVERDICT. This only requires a ne...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check the return value of cl-qdisc-ops-peek, which could result in a null pointer dereference...

Allocation of Resources Without Limits or Throttling

Overview github.com/hashicorp/consul/agent is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

GHSA-7G3R-8C6V-HFMR Consul key/value endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

Consul key/value endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

DEBIAN-CVE-2025-11374

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

CVE-2025-11374

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

UBUNTU-CVE-2025-11374

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...