Filter
AND
AND

Teradata DatabaseCertain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, m…

First published (updated )

SUSE Linux Enterprise ServerLast updated 5 December 2024

First published (updated )

Red Hat Enterprise LinuxRelax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. T…

EPSS
0.04%
First published (updated )

SUSE Linux Enterprise ServerLast updated 18 February 2025

First published (updated )

Linux KernelNull Pointer Dereference

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Opensuse Supportutilssupportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh

First published (updated )

openSUSEpermissions: chkstat does not check for group-writable parent directories or target files in safeOpen()

First published (updated )

Cannacanna: unsafe handling of /tmp/.iroha_unix directory

First published (updated )

GRUB 2grub2-once uses fixed file name in /var/tmp

First published (updated )

redhat/grub2GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/grub2GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.

First published (updated )

redhat/grub2GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

First published (updated )

Opensuse Autoyast2Deprecated functionality in autoyast2 automatically imports gpg keys without checking them

First published (updated )

FedoraInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker…

First published (updated )

composer/phpmyadmin/phpmyadminSQL Injection, XSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SUSE Linux Enterprise Servermysql-systemd-helper allows setting 640 permissions of arbitrary files

First published (updated )

FedoraInsufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attac…

First published (updated )

FedoraIncorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote a…

First published (updated )

FedoraInappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacke…

First published (updated )

FedoraInappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote atta…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

FedoraInappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacke…

First published (updated )

FedoraXSS

First published (updated )

FedoraXSS

First published (updated )

FedoraInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote att…

First published (updated )

FedoraInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote att…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud Nextcloud ServerInput Validation

First published (updated )

openSUSENetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is…

First published (updated )

yast2-rmt project yast2-rmtyast2-rmt exposes CA private key passhrase in log-file

First published (updated )

Opensuse Libzypplibzypp stores cookies world readable

First published (updated )

Arista EOSInteger Overflow

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203