CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: skopeo-fips, etcd-fips, falco-exporter, nova-fips, kpt, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, mongo-tools, docker-credential-ecr-login, prometheus-process-exporter, argo-rollouts-fips, velero-plugin-for-microsoft-azure-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: skopeo-fips, etcd-fips, falco-exporter, nova-fips, kpt, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, mongo-tools, docker-credential-ecr-login, prometheus-process-exporter, argo-rollouts-fips, velero-plugin-for-microsoft-azure-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: skopeo-fips, etcd-fips, falco-exporter, nova-fips, kpt, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, mongo-tools, docker-credential-ecr-login, prometheus-process-exporter, argo-rollouts-fips, beats, velero-plugin-for-microsoft-azure-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: skopeo-fips, etcd-fips, falco-exporter, nova-fips, kpt, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, mongo-tools, docker-credential-ecr-login, prometheus-process-exporter, argo-rollouts-fips, velero-plugin-for-microsoft-azure-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: skopeo-fips, etcd-fips, falco-exporter, nova-fips, kpt, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, mongo-tools, docker-credential-ecr-login, prometheus-process-exporter, argo-rollouts-fips, velero-plugin-for-microsoft-azure-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: skopeo-fips, etcd-fips, falco-exporter, nova-fips, kpt, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, mongo-tools, docker-credential-ecr-login, prometheus-process-exporter, argo-rollouts-fips, velero-plugin-for-microsoft-azure-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: skopeo-fips, etcd-fips, falco-exporter, nova-fips, kpt, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, mongo-tools, docker-credential-ecr-login, prometheus-process-exporter, argo-rollouts-fips, velero-plugin-for-microsoft-azure-fips,...

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fixed a memory leak that occurred when using one-step timestamping. When running one-step sync timestamping, the hardware is configured to insert the TX time into the frame. There is therefore no reason to keep th...

Jenkins JDepend Plugin vulnerable to XML external entity attacks

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file...

GHSA-X6FH-7QMF-69XH vulnerabilities

Vulnerabilities for packages: step, step-ca, caddy, step-issuer...

CVE-2025-62820 vulnerabilities

Vulnerabilities for packages: step, step-ca, caddy, step-issuer...

CVE-2025-62820 vulnerabilities

Vulnerabilities for packages: caddy-fips, step-issuer, step-ca, step-ca-fips, step-fips, caddy, step-issuer-fips, step...

GHSA-X6FH-7QMF-69XH vulnerabilities

Vulnerabilities for packages: caddy-fips, step-issuer, step-ca, step-ca-fips, step-fips, caddy, step-issuer-fips, step...

CVE-2025-10861

CVE-2025-10861: Unauthenticated SSRF in the WordPress plugin “Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers” affecting versions up to and including 2.1.4 due to insufficient URL validation. Exploitation could allow the server to make requests t...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

EUVD-2025-35706

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-60932

Multiple stored cross-site scripting XSS vulnerabilities in the Current Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...