Exploit for Cross-site Scripting in Humansignal Label_Studio

CVE-2025-25296 Proof of Concept POC Description This pr...

SUSE CVE-2024-57782

An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service...

The vulnerability of the dockerd software for managing SAN networks with Brocade SANnav allows a hacker to increase their privileges.

The vulnerability of the dockerd software for managing SAN networks in Brocade SANnav systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Moby

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Moby. Vulnerability Details CVEID:CVE-2024-41110 DESCRIPTION: Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine,...

AZL-57362 CVE-2025-22869 affecting package docker-buildx for versions less than 0.14.0-4

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57374 CVE-2025-22869 affecting package docker-compose for versions less than 2.27.0-4

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

Amazon Linux 2 : docker (ALASDOCKER-2025-051)

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2025-051 advisory. golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead ...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2025-050)

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2025-050 advisory. golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims c...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm, cosign, ip-masq-agent, go-bindata, shfmt, harbor-registry, kind, local-static-provisioner, rclone, src-fingerprint, rootlesskit, capslock, flux-notification-controller, mkcert, buildkitd, src, newrelic-nri-statsd, pulumi-language-yam...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: cosign, kube-fluentd-operator, src-fingerprint, openbao-k8s, crane, multus-cni, kubernetes, aactl, gitsign, volume-modifier-for-k8s, ferretdb, nri-prometheus, sftpgo, gcsfuse, kyverno-policy-reporter-kyverno-plugin, prometheus-operator, prometheus-pushgateway,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm, kube-rbac-proxy, ip-masq-agent, go-bindata, nri-couchbase, shfmt, kind, src-fingerprint, capslock, buildkitd, sbom-scorecard, src, pulumi-language-yaml, eksctl, newrelic-prometheus-configurator, hello-world-golang, nodetaint,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm, kube-rbac-proxy, ip-masq-agent, go-bindata, nri-couchbase, shfmt, kind, src-fingerprint, capslock, buildkitd, sbom-scorecard, src, pulumi-language-yaml, eksctl, newrelic-prometheus-configurator, hello-world-golang, nodetaint,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: chartmuseum, docker-credential-acr-env, nri-nagios, capslock, aws-flb-firehose, prometheus-postgres-exporter, prometheus-pushgateway-fips, kaf, temporal-server-fips, cert-exporter, kube-logging-logging-operator, nri-memcached, hubble-ui-backend-fips,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: chartmuseum, docker-credential-acr-env, nri-nagios, capslock, aws-flb-firehose, prometheus-postgres-exporter, prometheus-pushgateway-fips, kaf, temporal-server-fips, cert-exporter, kube-logging-logging-operator, nri-memcached, hubble-ui-backend-fips,...

openSUSE Security Advisory (SUSE-SU-2024:4204-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...

openSUSE Security Advisory (SUSE-SU-2024:0586-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...