RHEL 8 : java-1.8.0-ibm (RHSA-2025:2615)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2615 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 8 to...

CVE-2025-21743 affecting package kernel for versions less than 6.6.78.1-1

CVE-2025-21743 affecting package kernel for versions less than 6.6.78.1-1. A patched version of the package is available...

CVE-2025-29774

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. Th...

CVE-2025-29775 xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. Th...

CVE-2025-29774 xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. Th...

CVE-2025-2177

A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbisearchnew of the file src/search.c. The manipulation of the argument patlen leads to integer overflow. The attack can be initiated remotely. The exploit has been disclosed to the...

SUSE CVE-2025-25196

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.4 Helm chart openfga-0.2.22, docker v.1.8.4 are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users on OpenFGA...

PT-2025-25226 · Gnu +1 · Http Request2 +1

Name of the Vulnerable Software and Affected Versions: Tunnelblick versions 3.5beta06 through 6.x Tunnelblick version 7.0 and earlier Description: The issue is related to the HTTP Request2 library used for processing HTTP requests in the Tunnelblick VPN client. It involves information disclosure...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free through the xsltGetInheritedNsList process. An attacker can manipulate memory and potentially execute arbitrary code by excluding result prefixes. Remediation Upgrade libxslt to version 1.1.43 or higher. References - GitH...

CVE-2024-47143 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-47143 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-57908 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-57908 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-54683 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-54683 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-57997 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-57997 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-56611 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56611 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56634 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56634 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-57949 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-57949 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56602 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56602 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-21689 affecting package kernel for versions less than 6.6.76.1-1

CVE-2025-21689 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56640 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56640 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-58007 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-58007 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...