USN-7469-2: Apache Tomcat vulnerability

USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for Apache Tomcat. Original advisory details: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An attacker could possibly use thi...

Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001023 fixes one issue. The following security issue was fixed: CVE-2024-56650: netfilter: xtables: fix LED ID check in ledtgcheck bsc1235431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

PT-2025-18056 · Seventhqueen · Seventhqueen Kleo

Name of the Vulnerable Software and Affected Versions: SeventhQueen Kleo versions prior to 5.4.4 Description: The issue is related to a missing authorization vulnerability. This problem affects SeventhQueen Kleo, with no specific details on the estimated number of potentially affected devices or...

SUSE: Security Advisory (SUSE-SU-2025:1374-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-22176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the net sched: ets, where a netem child qdisc can cause the parent qdisc's enqueue callback to be reentrant. This can le...

PT-2025-17973 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: The issue is related to an information disclosure problem. Attackers can exploit error messages to obtain the system's sensitive information. Recommendations: At the moment, there is no...

kyverno-1.14.0-1.1 on GA media (moderate)

kyverno-1.14.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15029-1 Rating: moderate Cross-References: CVE-2025-22871 CVSS scores: CVE-2025-22871 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-22871 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

Debian dla-4138 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4138 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4138-1 [email protected] https://www.debian.org/lts/security/...

PT-2025-17935 · Mytel Telecom · Mytel Telecom Online Account System

Name of the Vulnerable Software and Affected Versions: Mytel Telecom Online Account System version 1.0 Description: An issue in the system allows attackers to bypass the OTP verification process via a crafted request. Recommendations: For Mytel Telecom Online Account System version 1.0, consider...

PT-2025-17871 · Unknown · Sherpa Orchestrator

Name of the Vulnerable Software and Affected Versions: Sherpa Orchestrator version 141851 Description: The issue allows for stored XSS attacks by an administrator through the name parameter when adding or updating licenses. The XSS payload can execute when the license expires. Recommendations: Fo...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mozjs60 (SUSE-SU-2025:1365-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1365-1 advisory. - CVE-2024-56431: Fixed a negative shift in huffdec.c bsc1234837. Tenable has extracted the preceding...

Oracle Linux 8 : gnutls (ELSA-2025-20284)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20284 advisory. - Backport the fix for CVE-2024-12243 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

PT-2025-17821 · Unknown · Twitter Card Generator

Name of the Vulnerable Software and Affected Versions: Twitter Card Generator versions 1.0.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Twitter Card Generator. Recommendations: For Twitter Card Generator versions...

PT-2025-17831 · Unknown · Stressfree Sites Business Contact Widget

Name of the Vulnerable Software and Affected Versions: StressFree Sites Business Contact Widget versions n/a through 2.7.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that...

PT-2025-20352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential use-after-free UAF issue in the hfsc dequeue function has been resolved. The fix aims to safeguard this function, similar to a previous patch. However, a reliable reproducer...

PT-2025-17790 · WordPress · Awesome Wp Image Gallery

Name of the Vulnerable Software and Affected Versions: Awesome Wp Image Gallery versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-17824 · Unknown · Alphasis Related Posts Via Taxonomies

Name of the Vulnerable Software and Affected Versions: alphasis Related Posts via Taxonomies versions n/a through 1.0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a...

CLSA-2025-1745427668 liblouis: Fix of CVE-2023-26768

CVE-2023-26768: fix buffer overflow that allows a remote attacker to cause a denial of service...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

PT-2025-17679 · Abb · Abb Mv Drives

Name of the Vulnerable Software and Affected Versions: ABB MV Drives affected versions not specified Description: A denial-of-service DoS issue could incapacitate industrial processes, leading to operational delays and financial losses. Recommendations: At the moment, there is no information abou...