Lucene search
+L

2527 matches found

OSV
OSV
added 2025/10/03 7:56 p.m.6 views

RLSA-2025:7479 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jw...

7.5CVSS6.6AI score0.00804EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/03 7:56 p.m.6 views

RLSA-2025:16432 Moderate: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 For more details about the security issues, including the impact, a CVSS score,...

6.8CVSS7.2AI score0.0058EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2025/10/03 7:56 p.m.7 views

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

6.8CVSS7.4AI score0.0058EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2025/10/03 7:56 p.m.10 views

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

9.1CVSS7.8AI score0.00778EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/03 7:27 p.m.4 views

EUVD-2025-32326

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

9.9CVSS6.9AI score0.86767EPSS
SaveExploits14References3
Amazon
Amazon
added 2025/09/29 12:0 a.m.6 views

Important: firefox

Issue Overview: Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. CVE-2025-10527 Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component...

8.8CVSS7.5AI score0.01279EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2025/09/24 2:11 p.m.11 views

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript...

6.5CVSS7.3AI score0.00289EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2025/09/24 7:48 a.m.7 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to form-data-4.0.3.tgz CVE-2025-7783

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to form-data-4.0.3.tgz CVE-2025-7783. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerability in...

9.4CVSS6.9AI score0.01735EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2025/09/23 10:4 a.m.4 views

RHSA-2025:16432 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

6.8CVSS7AI score0.0058EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
added 2025/09/23 8:27 a.m.7 views

Moderate: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

6.8CVSS6.7AI score0.0058EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/23 12:0 a.m.5 views

ALSA-2025:16432 Moderate: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

6.8CVSS6.8AI score0.0058EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/09/23 12:0 a.m.3 views

RHEL 10 : opentelemetry-collector (RHSA-2025:16432)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:16432 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: net/http: Sensitive headers not cleared on cross-origi...

6.8CVSS6.6AI score0.0058EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/09/22 1:28 a.m.6 views

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript...

6.5CVSS7.3AI score0.00289EPSS
SaveExploits0References6
OSV
OSV
added 2025/09/22 12:0 a.m.7 views

ALSA-2025:16260 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary conditions in the...

8.8CVSS7.5AI score0.00681EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2025/09/19 12:0 a.m.3 views

Vulnerability of the JavaScript component: The GC functions in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to compromise the confidentiality and integrity of protected information.

Vulnerability of the JavaScript component: The GC functions of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to insufficient checking of unusual or exceptional states. Exploiting this vulnerability allows an attacker to compromise the confidentiality and...

6.5CVSS6.6AI score0.00289EPSS
SaveExploits0References20Affected Software7
RedHat Linux
RedHat Linux
added 2025/09/18 10:30 a.m.7 views

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript...

6.5CVSS7.3AI score0.00289EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/18 12:0 a.m.6 views

AlmaLinux 9 : opentelemetry-collector (ALSA-2025:15887)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:15887 advisory. net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 Tenable has extracted the preceding description block directly from the...

6.8CVSS6.5AI score0.0058EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/09/17 3:41 p.m.4 views

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript...

6.5CVSS7.3AI score0.00289EPSS
SaveExploits0References6
OSV
OSV
added 2025/09/17 12:0 a.m.5 views

ALSA-2025:16109 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary conditions in the...

8.8CVSS7.5AI score0.00681EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2025/09/16 11:26 p.m.3 views

SUSE CVE-2025-10532

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

6.5CVSS6.6AI score0.00289EPSS
SaveExploits0References12
Rows per page
Query Builder