Mozilla Firefox和Mozilla Thunderbird 资源管理错误漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...

PT-2026-21735

Race condition in the JavaScript: GC component. This vulnerability affects Firefox 148...

Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector

Summary Multiple vulnerabilities were addressed in IBM StreamSets Data Collector version 7.1.0 Vulnerability Details CVEID:CVE-2025-12194 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion...

[SECURITY] Fedora 42 Update: rust-crypto-auditing-agent-0.2.3-6.fc42

Event collector agent for crypto-auditing project...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, crossplane-provider-aws-sqs, frp, task, govulncheck, kubernetes-dashboard, gatus, node-feature-discovery, prometheus-pushgateway, aws-load-balancer-controller, dive, regclient, external-secrets-operator, custom-pod-autoscaler,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, crossplane-provider-aws-sqs, frp, task, govulncheck, kubernetes-dashboard, gatus, node-feature-discovery, prometheus-pushgateway, aws-load-balancer-controller, dive, regclient, external-secrets-operator, custom-pod-autoscaler,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: agentbeat-fips, k8s-agents-operator, kube-metrics-adapter-fips, cert-manager-webhook-pdns-fips, malcontent, opa-fips-envoy, kubeflow-fips, mongodb-kubernetes-operator, confluent-cp-docker-utils, argo-rollouts, gitness, calico, plugin-barman-cloud-fips, stampdalf,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: agentbeat-fips, k8s-agents-operator, kube-metrics-adapter-fips, cert-manager-webhook-pdns-fips, malcontent, opa-fips-envoy, kubeflow-fips, mongodb-kubernetes-operator, confluent-cp-docker-utils, argo-rollouts, gitness, calico, plugin-barman-cloud-fips, stampdalf,...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-agent-0.2.4-3.fc43

Event collector agent for crypto-auditing project...

AlmaLinux 9 : opentelemetry-collector (ALSA-2026:1908)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:1908 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding description...

AlmaLinux 10 : opentelemetry-collector (ALSA-2026:1907)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:1907 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding descriptio...

MiracleLinux 9 : opentelemetry-collector-0.135.0-3.el9_7 (AXSA:2026-158:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-158:01 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

Security Bulletin: A security vulnerability has been identified in IBM StreamSets Data Collector

Summary A security vulnerability CVE-2025-41242 has been addressed in IBM StreamSets Data Collector version 7.1.0 Vulnerability Details CVEID:CVE-2025-41242 DESCRIPTION: Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servle...

AZL-76790 CVE-2025-58190 affecting package azl-otel-collector 0.127.0-1

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

RHSA-2026:1908 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:1907 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...