Chromium: CVE-2026-0905 Insufficient policy enforcement in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2025-64715

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

PT-2025-47940

Name of the Vulnerable Software and Affected Versions Free5GC versions 4.0.0 through 4.0.1 Description A crafted POST request to the Npcf BDTPolicyControl API can cause a denial of service. The API endpoint Npcf BDTPolicyControl is vulnerable to this issue. Recommendations Update to a newer versi...

EUVD-2018-2949

Malware in sbrugna...

EUVD-2023-1092

Malicious code in bioql PyPI...

EUVD-2023-0945

Malicious code in bioql PyPI...

EUVD-2023-2509

Malicious code in bioql PyPI...

EUVD-2022-44340

Malicious code in bioql PyPI...

EUVD-2025-7997

Malicious code in bioql PyPI...

EUVD-2022-44301

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.7.0 release

Red Hat OpenShift distributed tracing platform Tempo 3.7.0 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides new features, security improvements, and bug fixes. Breaking changes: Nothing Deprecations: Nothing Technology Preview features: Nothing...

AWS VDP: Existence of completed pods allows for bypass of Kubernetes NetworkPolicy

Description The Amazon VPC CNI controller, when configured to manage NetworkPolicy rules, will incorrectly apply firewall rules for Completed pods as if the pods are still running, causing these rules to be applied to other unrelated pods that happen to receive the same IP address as a Completed...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the use of an untrusted network policy file, which allows a hacker to compromise the integrity of the protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of an untrusted network policy file. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity of protected information...

Malicious code in network_policy (npm)

The package networkpolicy was found to contain malicious code...

The vulnerability of the Cisco Identity Services Engine (ISE) platform, a control plane for network policies, stems from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE platform-related network policy management platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2023-27595

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This ca...

CVE-2020-0277

In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing a malicious app to modify the device's data plan with no additional execution privileges needed. User interaction is not needed for...

Ubuntu: Security Advisory (USN-7444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: policy-controller, flux-image-automation-controller, mage, fluent-operator, redka, crane, swagger, rootlesskit, metrics-server, tfsec, filebrowser, flux-notification-controller, kubernetes-csi-driver-hostpath, spqr, docker-cli, kubernetes-replicator,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: policy-controller, flux-image-automation-controller, mage, fluent-operator, redka, crane, swagger, rootlesskit, metrics-server, tfsec, filebrowser, flux-notification-controller, kubernetes-csi-driver-hostpath, spqr, docker-cli, kubernetes-replicator,...