python311-Pillow-11.3.0-1.1 on GA media (moderate)

python311-Pillow-11.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15316-1 Rating: moderate Cross-References: CVE-2025-48379 CVSS scores: CVE-2025-48379 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-48379 SUSE : 8.4...

Mageia: Security Advisory (MGASA-2025-0202)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

go1.24-1.24.4-1.1 on GA media (moderate)

go1.24-1.24.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15224-1 Rating: moderate Cross-References: CVE-2025-0913 CVE-2025-22874 CVE-2025-4673 CVSS scores: CVE-2025-0913 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2025-0913 SUSE : 6.8...

kubernetes1.32-apiserver-1.32.6-1.1 on GA media (moderate)

kubernetes1.32-apiserver-1.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15236-1 Rating: moderate Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3...

libwx_gtk2u_adv-suse16_0_0-3.2.8-4.1 on GA media (moderate)

libwxgtk2uadv-suse1600-3.2.8-4.1 on GA media Announcement ID: openSUSE-SU-2025:15309-1 Rating: moderate Cross-References: CVE-2024-58249 CVSS scores: CVE-2024-58249 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2024-58249 SUSE : 2.3...

ovmf-202505-2.1 on GA media (moderate)

ovmf-202505-2.1 on GA media Announcement ID: openSUSE-SU-2025:15255-1 Rating: moderate Cross-References: CVE-2024-38797 CVE-2024-38805 CVSS scores: CVE-2024-38797 SUSE : 4.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVE-2024-38797 SUSE : 5.1...

nova-3.11.4-1.1 on GA media (moderate)

nova-3.11.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15251-1 Rating: moderate Cross-References: CVE-2025-22874 CVSS scores: CVE-2025-22874 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-22874 SUSE : 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N...

python311-jupyter-core-5.8.1-1.1 on GA media (moderate)

python311-jupyter-core-5.8.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15272-1 Rating: moderate Cross-References: CVE-2025-30167 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

CVE-2025-38183

creationtimestamp| type| source ---|---|--- 2025-07-04 14:36:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114795463565126368...

CVE-2025-38208

In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automountfullpath page is checked for null in buildpathfromdentryoptionalprefix when tcon-originfullpath is not set. However, the check is missing when it is set. Add a check to prevent a potential...

CVE-2025-38216

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 "iommu/vt-d: Add support for static identity domain" changed the context entry setup during domain attachment from a set-and-check policy to a...

CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

CVE-2025-38176

In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfsevictinode Running 'stress-ng --binderfs 16 --timeout 300' under KASAN-enabled kernel, I've noticed the following: BUG: KASAN: slab-use-after-free in binderfsevictinode+0x1de/0x2d0 Write of...

PT-2025-27909 · WordPress · Pressroom - News Magazine Wordpress Theme

Name of the Vulnerable Software and Affected Versions: Pressroom - News Magazine WordPress Theme versions n/a through 6.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables...

PT-2025-27910 · Rankie · Rankie

Name of the Vulnerable Software and Affected Versions: Rankie versions 1.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicio...

Fedora 41 : mingw-gdk-pixbuf (2025-be7e8114df)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-be7e8114df advisory. Backport fix for CVE-2025-6199. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CVE-2025-38128

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject malformed HCICMDSYNC commands In 'mgmthcicmdsync', check whether the size of parameters passed in 'struct mgmtcphcicmdsync' matches the total size of the data i.e. 'sizeofstruct mgmtcphcicmdsync' plus...

CVE-2025-38136

In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initialization sequence in usbhsprobe to enable runtime PM before accessing registers, preventing potential crashes due to uninitialized clocks...

CVE-2025-38109

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...