1158 matches found
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, pulumi-language-yaml, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, flux-operator, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...
CVE-2025-61725 vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...
GHSA-7WWX-XJ66-R44X vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...
CVE-2025-50739
iib0011 omni-tools v0.4.0 is vulnerable to remote code execution via unsafe JSON deserialization...
CVE-2025-58185 Parsing DER payload can cause memory exhaustion in encoding/asn1
Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...
GO-2025-4011 Parsing DER payload can cause memory exhaustion in encoding/asn1
Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...
CVE-2025-11447 Allocation of Resources Without Limits or Throttling in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads...
GHSA-G46H-2RQ9-GW5M OpenBao has potential Denial of Service vulnerability when processing malicious unauthenticated JSON requests
Summary JSON objects after decoding might use more memory than their serialized version. It is possible to tune a JSON to maximize the factor between serialized memory usage and deserialized memory usage similar to a zip bomb. While reproducing the issue, we could reach a factor of about 35. This...
Dell BSAFE Crypto-C GetIndefiniteElementLen stack overflow vulnerability
Talos Vulnerability Report TALOS-2025-2142 Dell BSAFE Crypto-C GetIndefiniteElementLen stack overflow vulnerability October 16, 2025 CVE Number None SUMMARY A stack overflow vulnerability exists in the GetIndefiniteElementLen functionality of Dell BSAFE Crypto-C xxx. A specially crafted ASN.1...
D-Link Nuclias Connect 安全漏洞
D-Link Nuclias Connect is a network management software from D-Link for centralized management of wireless access points APs, supporting multi-device remote control and reporting capabilities. D-Link Nuclias Connect suffers from an observable response difference vulnerability that stems from the...
CVE-2025-54858
When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON schema, and the security policy is applied to a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End o...
SUSE SLES15 Security Update : haproxy (SUSE-SU-2025:03589-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03589-1 advisory. - CVE-2025-11230: Fixed issue in the mjson JSON decoder, that could have let to excessive resource consumption when processing numbers with large...
RLSA-2025:17119 Moderate: perl-JSON-XS security update
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 For...
