SUSE-SU-2025:20395-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: - Update to release 3.49.1: Improve portability of makefiles and configure scripts. CVE-2025-29087: Fixed Integer Overflow in SQLite concat Function bsc1241020 CVE-2025-29088: Fixed integer overflow through the SQLITEDBCONFIGLOOKASIDE component...

Description of the security update for Outlook 2016: June 10, 2025 (KB5002683)

None None...

Description of the security update for PowerPoint 2016: June 10, 2025 (KB5002689)

None None...

Description of the security update for Office Online Server: June 10, 2025 (KB5002728)

None None...

PT-2025-24837 · Microsoft · Windows Rdp Server +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server affected versions not specified Description: A protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Recommendations: At the moment, there is no information abo...

Fedora 42 : exim (2025-d7548ec9e2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d7548ec9e2 advisory. This is an update fixing CVE 2025-30232. ---- This is new version fixing possible remote SQL injection and FTBFS with gcc-15. Tenable has extracted the...

PT-2025-24648 · Nozomi Networks · Cmc +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A privilege escalation issue may allow a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, potentially allowing...

PT-2025-24821 · Microsoft · Windows Storage Management Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Management Provider affected versions not specified Description: The issue is an out-of-bounds read that allows an authorized attacker to disclose information locally. Recommendations: At the moment, there is no information...

SUSE SLES15 Security Update : kernel RT (Live Patch 9 for SLE 15 SP6) (SUSE-SU-2025:01843-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:01843-1 advisory. This update for the Linux Kernel 6.4.0-1506001029 fixes one issue. The following security issue was fixed: - CVE-2024-57996: netsched: schsfq: do not...

Ubuntu: Security Advisory (USN-7545-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-24836

Name of the Vulnerable Software and Affected Versions Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description The issue concerns uncontrolled resource consumption in the Windows Local Security Authority Subsystem Service LSASS, allowing an unauthorized...

PT-2025-25003 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could...

PT-2025-24838 · Microsoft · Windows Rdp Server +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server affected versions not specified Description: The issue is related to a protection mechanism failure in Windows DHCP Server, allowing an unauthorized attacker to deny service over a network. Recommendations: At the moment,...

PT-2025-24827 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: A heap-based buffer overflow issue in the Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Recommendations: A...

PT-2025-24907 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to the improper neutralization of special elements used in a command, also known as 'command injection', in Microsoft Visual Studio. This allows an...

Important: amazon-ssm-agent

Issue Overview: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. CVE-2025-22869 Affected Packages:...

USN-7545-2: Apport regression

USN-7545-1 fixed a vulnerability in Apport. The update introduced a regression that prevented core dumps from being generated inside containers. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered that Apport incorrectly handled metadata...

PT-2025-24548

Name of the Vulnerable Software and Affected Versions Lablup's BackendAI affected versions not specified Description The issue allows attackers to expose sensitive data in active sessions, enabling them to retrieve credentials for users on the management platform. Recommendations At the moment,...

PT-2025-24525

Name of the Vulnerable Software and Affected Versions MyStyle Custom Product Designer versions 3.21.1 and earlier Description The issue is related to an SQL Injection vulnerability, specifically Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injectio...

Debian dla-4212 : libapache2-mod-security2 - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4212 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4212-1 [email protected] https://www.debian.org/lts/security/...