1381 matches found
CVE-2025-66623
Strimzi (Kafka on Kubernetes/OpenShift) has a vulnerability in versions 0.47.0–0.49.0 where an incorrect Kubernetes Role allows GET access to all Secrets in the target namespace for Kafka Connect and MirrorMaker 2 operands. The issue is fixed in Strimzi 0.49.1. Impact is restricted to unauthorize...
CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...
CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...
PT-2025-49308
Name of the Vulnerable Software and Affected Versions Strimzi versions 0.47.0 through 0.49.0 Description Strimzi allows running an Apache Kafka cluster on Kubernetes or OpenShift. Versions from 0.47.0 up to 0.49.0 incorrectly create a Kubernetes Role. This role grants Apache Kafka Connect and...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, gogatekeeper, tfsec, apache-exporter, mods, paranoia, kube-metrics-adapter, pguser, nri-haproxy, tempo, kapp-controller, kubescape, redka, nova, op-geth, frp, nri-jmx, crossplane-provider-keycloak, terraform, hubble,...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, gogatekeeper, tfsec, apache-exporter, mods, paranoia, kube-metrics-adapter, pguser, nri-haproxy, tempo, kapp-controller, kubescape, redka, nova, op-geth, frp, nri-jmx, crossplane-provider-keycloak, terraform, hubble,...
VulnCheck KEV: CVE-2023-52251
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages...
OESA-2025-2747 wireshark security update
Security Fixes: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service due to access of uninitialized pointerCVE-2025-13499...
OESA-2025-2746 wireshark security update
Security Fixes: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service due to access of uninitialized pointerCVE-2025-13499...
OESA-2025-2745 wireshark security update
Security Fixes: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service due to access of uninitialized pointerCVE-2025-13499...
OESA-2025-2744 wireshark security update
Security Fixes: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service due to access of uninitialized pointerCVE-2025-13499...
OESA-2025-2743 wireshark security update
Security Fixes: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service due to access of uninitialized pointerCVE-2025-13499...
Security Bulletin: Vulnerabilities in Apache Kafka Client affect BM Spectrum Control
Summary Apache Kafka Client is vulnerable to Server-Side Request Forgery , Remote Code Execution. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-27817 DESCRIPTION: A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka...
This Week in Spring - Spring Boot 4 edition! - November 25th, 2025
Hi, Spring fans! Welcome to another illustrious installment of This Week in Spring! It’s Thanksgiving week here in the United States. Thanksgiving is traditionally celebrated with friends and family every fourth Thursday of November, gathered around a table full of food and, usually, a giant...
SUSE CVE-2025-13499
Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...
Linux Distros Unpatched Vulnerability : CVE-2025-13499
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service CVE-2025-13499 Note that Nessus relies on the presence of the package as...
DEBIAN-CVE-2025-13499
Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...
CVE-2025-13499
Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...