Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.13.2 container image updates

Red Hat Advanced Cluster Management for Kubernetes 2.13.2 General Availability release, with updates to container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2025-0120

creationtimestamp| type| source ---|---|--- 2025-04-09 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0120 2025-04-11 05:34:32+00:00| seen| https://t.me/cvedetector/22694 2025-04-11 07:32:02+00:00| seen| Telegram/rqXPMnEckLnklBKkSNUk8xIPJAgwKsVkMSDHWe6zELgBADE 2025-04-11...

CVE-2025-1968

creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11060 2025-04-09 13:51:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114308330575865811 2025-04-09 18:26:49+00:00| seen|...

KEX init error results with excessive memory usage

...

CVE-2025-2287

creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd755chip2b 2025-04-09 13:15:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114308189037550499 2025-04-10 10:00:00+00:00| seen|...

CVE-2025-2285

creationtimestamp| type| source ---|---|--- 2025-04-08 15:47:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10930 2025-04-09 13:15:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114308189037550499 2025-04-10 10:00:00+00:00| seen|...

golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh

A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange...

Schneider Electric Trio Q Licensed Data Radio

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

CVE-2025-1079

creationtimestamp| type| source ---|---|--- 2025-04-07 22:29:24+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/9787 2025-05-12 20:23:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496729062245571 2025-05-12 20:29:38+00:00| published-proof-of-concept|...

CVE-2024-43066

creationtimestamp| type| source ---|---|--- 2025-04-07 11:21:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114296413423674894 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:41+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...

CVE-2025-21440

creationtimestamp| type| source ---|---|--- 2025-04-07 11:08:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114296362577403487 2025-04-07 13:36:07+00:00| seen| Telegram/PxgItuH1qTSdpVIqjljQp70ezMBrxj3Wpd4MMoc5smzp-38 2025-04-07 15:07:16+00:00| seen|...

CVE-2025-31172

creationtimestamp| type| source ---|---|--- 2025-04-07 05:41:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114295078467818703 2025-04-07 06:32:02+00:00| published-proof-of-concept| Telegram/EsnBsJ3Ssj-UYUC8Y7f1dDSxyldCCaK6EjJlv4mvyH2MMw 2025-04-07 07:17:44+00:00| seen|...

CVE-2025-3349

creationtimestamp| type| source ---|---|--- 2025-04-06 17:06:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114292108038095818 2025-04-07 11:46:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10695 2025-04-07 15:07:13+00:00| seen|...

CVE-2025-30370

creationtimestamp| type| source ---|---|--- 2025-04-03 21:51:40+00:00| published-proof-of-concept| https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-cj5w-8mjf-r5f8 2025-04-03 22:51:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114276478970363828 2025-04-03...

CVE-2024-47217

creationtimestamp| type| source ---|---|--- 2025-04-03 20:35:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10339 2025-04-03 22:05:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114276298770722682 2025-04-03 22:05:38+00:00| seen|...

CVE-2025-31489

creationtimestamp| type| source ---|---|--- 2025-04-03 20:33:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114275934621714005 2025-04-03 20:33:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114275934621714005 2025-04-03 21:06:35+00:00| seen|...

GHSA-WG47-6JQ2-Q2HH

creationtimestamp| type| source ---|---|--- 2025-04-03 20:33:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114275934621714005 2025-04-03 20:33:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114275934621714005...

CVE-2025-3159

creationtimestamp| type| source ---|---|--- 2025-04-03 17:44:25+00:00| seen| https://t.me/cvedetector/21974 2026-01-24 11:28:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115949837621088494...

CVE-2025-31783

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leartes.NET Leartes TRY Exchange Rates leartes-try-exchange-rates allows Stored XSS.This issue affects Leartes TRY Exchange Rates: from n/a through = 2.1...

CVE-2025-3161

creationtimestamp| type| source ---|---|--- 2025-04-03 15:50:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274824494198093 2025-04-03 15:50:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274824494198093 2025-04-03 17:48:26+00:00| seen|...