GHSA-92CP-5422-2MW7 vulnerabilities

Vulnerabilities for packages: falcosidekick, kots, gitea, atlantis, authservice, splunk-otel-collector, oauth2-proxy, fluent-bit-plugin-loki...

GHSA-92CP-5422-2MW7 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, argo-cd-fips, authservice, juicefs, oauth2-proxy, splunk-otel-collector-fips, keda, loki, opentelemetry-collector-contrib-fips, traefik-fips, argo-cd, loki-fips, dapr, splunk-otel-collector, dapr-fips, falcosidekick-fips, mattermost, atlantis,...

CVE-2025-29923 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, argo-cd-fips, authservice, juicefs, oauth2-proxy, splunk-otel-collector-fips, keda, loki, opentelemetry-collector-contrib-fips, traefik-fips, argo-cd, loki-fips, dapr, splunk-otel-collector, dapr-fips, falcosidekick-fips, mattermost, atlantis,...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: grafana-alloy, argo-rollouts, amazon-cloudwatch-agent, kargo, nats, kubeflow-pipelines, opentelemetry-collector-contrib, splunk-otel-collector, tempo, k8sgpt, argo-workflows, opentelemetry-collector...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: grafana-alloy, argo-rollouts, amazon-cloudwatch-agent, kargo, nats, kubeflow-pipelines, opentelemetry-collector-contrib, splunk-otel-collector, tempo, k8sgpt, argo-workflows, opentelemetry-collector...

PT-2025-13819 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free UAF issue has been identified in the Linux kernel, specifically in the key put function. This issue arises when the reference count of a key is reduced to 0, allowing...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-45230

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-28219. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-45230 DESCRIPTION: Django is vulnerable to a denial of service,...

Virtuozzo Hybrid Infrastructure 6.3 Update 1 Hotfix 1 (6.3.1-106)

This update provides stability fixes. Vulnerability id: VSTOR-85873 Disks may be erroneously marked as ill. Vulnerability id: VSTOR-93149, VSTOR-100823 Improvements in the garbage collector. Vulnerability id: VSTOR-94512 Added the volume ID to LUN details. Vulnerability id: VSTOR-95095 Increased...

Malicious code in browser-data-collector (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1745 Malicious code in browser-data-collector (npm)

--- -= Per source details. Do not edit below this line.=-...

SkyCaiji 代码问题漏洞

SkyCaiji Blue Sky Collector is an open source free crawler system by zorlan individual developer. A code issue vulnerability exists in SkyCaiji version 2.9, which stems from an unrestricted file upload. An attacker can exploit the vulnerability to remotely execute code...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: octo-sts, melange, zarf, grafana-alloy, k3d, ksops, tflint, traefik, podman, flux-source-controller, sftpgo-plugin-kms, spire-controller-manager, undock, kyverno-notation-aws, sftpgo, fulcio, istio, grpc-health-probe, opentofu, openbao, skaffold, terragrunt, dex,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: octo-sts, melange, zarf, grafana-alloy, k3d, ksops, tflint, traefik, podman, flux-source-controller, sftpgo-plugin-kms, spire-controller-manager, undock, kyverno-notation-aws, sftpgo, fulcio, istio, grpc-health-probe, opentofu, openbao, skaffold, terragrunt, dex,...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to cryptography-42.0.7-cp37-abi3-manylinux_2_28_x86_64.whl CVE-2024-6119

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to cryptography-42.0.7-cp37-abi3-manylinux228x8664.whl CVE-2024-6119. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-6119 DESCRIPTION: OpenSSL is vulnerable to a...

[SECURITY] Fedora 41 Update: rust-crypto-auditing-agent-0.2.3-2.fc41

Event collector agent for crypto-auditing project...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2024-24897

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files...

Security update for gnutls

This update for gnutls fixes the following issues: CVE-2024-28835: certtool crash when verifying a certificate chain bsc1221747 CVE-2024-28834: Fixed side-channel in the deterministic ECDSA bsc1221746 jitterentropy: Release the memory of the entropy collector when using jitterentropy with phtread...

Security Bulletin: IBM Maximo Application Suite: Jinja2-3.1.3-py3-none is vulnerable to CVE-2024-34064 used in IBM Maximo Application Suite - Edge Data Collector

Summary IBM Maximo Application Suite - Edge Data Collector uses Jinja2-3.1.3-py3-none which is vulnerable to CVE-2024-34064 Vulnerability Details CVEID:CVE-2024-34064 DESCRIPTION: Jinja is vulnerable to cross-site scripting, caused by the acceptance of keys containing non-attribute characters by...

Security Bulletin: IBM Maximo Application Suite: idna-2.8-py2.py3-none-any.whl is vulnerable to CVE-2024-3651 used in IBM Maximo Application Suite - Edge Data Collector

Summary IBM Maximo Application Suite - Edge Data Collector uses idna-2.8-py2.py3-none-any.whl which is vulnerable to CVE-2024-3651 Vulnerability Details CVEID:CVE-2024-3651 DESCRIPTION: idna could allow a local user to cause a denial of service using a specially crafted argument to the idna.encod...