Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-25645)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-25645 advisory. - Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths...

python311-requests-2.33.0-1.1 on GA media (moderate)

python311-requests-2.33.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10455-1 Rating: moderate Cross-References: CVE-2026-25645 CVSS scores: CVE-2026-25645 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2026-25645 SUSE : 6.8...

CVE-2026-25645

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0381/ 2026-03-31 14:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3xyw3g26...

CVE-2026-25645 vulnerabilities

Vulnerabilities for packages: pypy-3.11, kubeflow-volumes-web-app, emissary, jupyter-base-notebook, kserve, kubeflow-katib, datadog-agent, py3-cassandra-medusa, k8s-sidecar, py3-pip, dask-kubernetes, mlflow, jwt-tool, airflow, pypy-3.10, py3-pipenv, superset, confluent-docker-utils, open-webui,...

CVE-2026-25645 vulnerabilities

Vulnerabilities for packages: dbt-core, jupyter-base-notebook, awx, litellm, kserve, py3-cassandra-medusa, apache-beam-python-3.11-sdk, barman, mlflow, opentelemetry-python-instrumentation, prefect, opal, tensorflow-cpu-jupyter, text-generation-inference, apache-beam-python-3.13-sdk,...

CVE-2026-25645

Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker...

CVE-2026-25645 Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker...

CVE-2026-25645 Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker...

CVE-2026-25645

The CVE describes an insecure temp-file extraction in the Requests library prior to v2.33.0. The vulnerable function requests.utils.extract_zipped_paths() writes the CA bundle into /tmp using a predictable, non-unique filename (e.g., cacert.pem) and reuses an existing file if present, rather than...

CVE-2019-25645

creationtimestamp| type| source ---|---|--- 2026-03-24 13:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsosjtn4t2x...

CVE-2024-25645

Under certain condition SAP NetWeaver Enterprise Portal - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application...

CVE-2024-25645

creationtimestamp| type| source ---|---|--- 2024-03-12 02:26:35+00:00| seen| https://t.me/ctinow/205244 2024-03-12 02:26:45+00:00| seen| https://t.me/ctinow/205251...

CVE-2024-25645

Under certain condition SAP NetWeaver Enterprise Portal - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application...

CVE-2024-25645 Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)

Under certain condition SAP NetWeaver Enterprise Portal - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application...

CVE-2024-25645 Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)

Under certain condition SAP NetWeaver Enterprise Portal - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application...

CVE-2024-25645

The CVE-2024-25645 entry concerns SAP NetWeaver (Enterprise Portal) version 7.50, where an information disclosure vulnerability could permit access to restricted data, causing low confidentiality impact with no integrity/availability impact. The connected records confirm the affected product and ...

CVE-2023-25645

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and...

CVE-2023-25645

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and...

CVE-2023-25645

CVE-2023-25645 describes a permission and access-control vulnerability in ZTE AndroidTV STBs. The root cause is improper permission settings that allow non-privileged applications to perform functions protected by signature/privilege-level permissions. The documented impact is that exploitation c...

K65213626: Linux kernel vulnerability CVE-2020-25645

Security Advisory Description A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read...