6075 matches found
CVE-2025-64170
sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered a...
UBUNTU-CVE-2025-64170
sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered a...
CVE-2025-64170
CVE-2025-64170 affects sudo-rs, a memory-safe Rust implementation of sudo/su. Concrete details from connected documents show a vulnerability that, when a password timeout occurs due to the user typing a password and not pressing return for an extended period, causes the entered keystrokes to be e...
CVE-2025-64170 sudo-rs: Partial password reveal is possible after timeout
sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered a...
EulerOS 2.0 SP10 : iputils (EulerOS-SA-2025-2417)
According to the versions of the iputils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ping in iputils before 20250602 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo Reply packet,...
Huawei EulerOS: Security Advisory for iputils (EulerOS-SA-2025-2417)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
📄 moew.government.bg Cross Site Scripting
moew.government.bg suffers from a cross site scripting vulnerability. It is unclear what vulnerable code base is being used or if it's custom, however, the researcher has not heard a response from the administrators for a year and they have not addressed the issue, putting their users at risk, so...
ECHO-93B4-5342-28D2 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989174)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989174 advisory. In the Linux kernel, the following vulnerability has been resolved: can: dev: cangetechoskb: prevent call to kfreeskb in hard IRQ context If a driver calls...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: fluent-bit-plugin-loki, regclient, frp, gostatsd, nfpm, velero-plugin-for-aws, terraform-provider-kubernetes, cluster-api-helm-controller, k3d, oras, xcover, certificate-transparency, yunikorn-k8shim, metacontroller, go-licenses, chisel, spqr, ini-file,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: vt-cli, pgpool2exporter, delve, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, flyte, azure-ipam, scorecard, kubernetes-csi-livenessprobe, regclient, timescaledb-parallel-copy, vault-env, mongo-tools, gostatsd, xcaddy, hydra, s5cmd,...