GHSA-WV7P-RJF3-9FR5 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-X774-V4VM-3H8M vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

Hitachi Energy PCU400

SUMMARY Hitachi Energy is aware of the multiple vulnerabilities related to various versions of OpenSSL library components used in PCU400 versions listed in this document below for IEC62351-3 secure for IEC104/DNP3 or PCULogger tool. These vulnerabilities if exploited, can cause confidentiality...

GHSA-664V-JFQ4-4MFQ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-68QC-65JP-4M7W vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9...

GHSA-Q27X-567X-5347 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, mysql, openjdk-8-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9...

GHSA-CXVC-C563-9W9G vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-84MJ-CCM5-9P48 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-5FC7-H7W8-354M vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9...

GHSA-5HQW-5FF8-G9CQ vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-H7PC-VX5R-JF48 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-V96H-275W-9C5P vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-QMF9-RQ8G-996M vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-W2V8-C457-CJVF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: chartmuseum, pombump, wire-go, kube-logging-operator, kubernetes-dashboard, fuse-overlayfs-snapshotter, grafana-operator, kube-state-metrics, node-problem-detector, nuclei, cert-exporter, request-1279, go-bindata, vault-csi-provider, kpt,...

openSUSE Security Advisory (SUSE-SU-2024:3151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Advisory 0111

Security Advisory 0111 . CSAF PDF Date: February 25, 2025 Revision | Date | Changes ---|---|--- 1.0 | February 25, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-1259 CVSSv3.1 Base Score: 7.7 CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Common Weakness Enumeration: CWE-284:...

CVE-2025-1412 vulnerabilities

Vulnerabilities for packages: mattermost, mattermost-fips...

Pen testing avionics under ED-203a

The aviation industry realised some time ago that taking a standard approach to the cyber security of its products was needed and that this was a specialist discipline. A family of documents was produced to help with this: ED-202A / DO-326A – what should be certified ED-203A / DO-356A – how these...

Rapid7 Fills Gaps in the CVE Assessment Process with AI-Generated Vulnerability Scoring in Exposure Command

NIST released an update highlighting that there would be delays in adding information on newly published CVEs this is also discussed in detail in our blog post from March of 2024. Due to resource constraints and an inability to keep up with the volume of newly-disclosed vulnerabilities, NVD shift...