GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, terraform-provider-time, sftpgo-plugin-geoipfilter, modelmesh-runtime-adapter, nats, custom-pod-autoscaler-operator, karma-fips, ctop, prometheus-beat-exporter-fips, git-lfs, vexctl, addon-resizer, vault-benchmark, kube-vip-cloud-provider,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, truffleruby, gitlab-rails-ce, jruby, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, logstash, kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

SUSE-SU-2025:03278-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.17.2-1 Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

Important: Red Hat Security Advisory: VolSync v0.12 security fixes and container updates

VolSync v0.12 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2025-10374

A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11. This affects an unknown part of the file /Adm/OperatorStop. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in newrelic-infra-operator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-10374

CVE-2025-10374 affects Shenzhen Sixun Business Management System version 7/11. The vulnerability resides in an improper authorization in the file /Adm/OperatorStop, enabling remote exploitation. Exploitation is possible with no privileges and no user interaction; CVSS notes POSsible high impact o...

PT-2025-37393

Name of the Vulnerable Software and Affected Versions: Shenzhen Sixun Business Management System versions 7/11 Description: A security flaw exists in Shenzhen Sixun Business Management System that allows for improper authorization. The issue affects an unknown part of the file /Adm/OperatorStop a...

Linux Distros Unpatched Vulnerability : CVE-2022-26308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration Credential store where a user with the role of Operator Write could create,...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: akhq, apache-nifi, flyway, celeborn, docker-selenium, thingsboard, strimzi-kafka-operator, druid, wavefront-proxy, kserve-modelmesh, wildfly, selenium, apicurio-registry, trino, opensearch, sonarqube, apache-activemq-artemis, zipkin, tez...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: akhq, apache-nifi, flyway, celeborn, docker-selenium, thingsboard, strimzi-kafka-operator, druid, wavefront-proxy, kserve-modelmesh, wildfly, selenium, apicurio-registry, trino, opensearch, sonarqube, apache-activemq-artemis, zipkin, tez...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: flyway, elasticsearch-fips, selenium, keycloak, wildfly, apicurio-registry, spark-fips, neo4j, kayenta-fips, seata, elasticsearch, celeborn, akhq, kserve-modelmesh, docker-selenium, apache-nifi, apache-hop-fips, zipkin, kayenta, thingsboard, sonarqube, druid,...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: flyway, elasticsearch-fips, selenium, keycloak, wildfly, apicurio-registry, spark-fips, neo4j, kayenta-fips, seata, elasticsearch, celeborn, akhq, kserve-modelmesh, docker-selenium, apache-nifi, apache-hop-fips, zipkin, kayenta, thingsboard, sonarqube, druid,...

CVE-2025-36193

IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Transformation Advisor Operator Catalog image...