61840 matches found
Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator
Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...
CVE-2025-8916 vulnerabilities
Vulnerabilities for packages: zipkin, druid, thingsboard, kserve-modelmesh...
GHSA-PRJ3-CCX8-P6X4 vulnerabilities
Vulnerabilities for packages: sonarqube, management-api-for-apache-cassandra-5.0, apicurio-registry, flyway, strimzi-kafka-operator, celeborn, wildfly, trino, keycloak, druid, spark, thingsboard, apache-nifi, tez, akhq, kserve-modelmesh...
GHSA-4CX2-FC23-5WG6 vulnerabilities
Vulnerabilities for packages: zipkin, druid, thingsboard, kserve-modelmesh...
CVE-2025-55163 vulnerabilities
Vulnerabilities for packages: sonarqube, management-api-for-apache-cassandra-5.0, apicurio-registry, flyway, strimzi-kafka-operator, celeborn, wildfly, trino, keycloak, druid, spark, thingsboard, apache-nifi, tez, akhq, kserve-modelmesh...
CVE-2025-8916 vulnerabilities
Vulnerabilities for packages: zipkin, pinot-fips, opensearch, elasticsearch-fips, kayenta, pinot, camunda-zeebe, logstash, druid, hadoop-fips, elasticsearch, solr, kserve-modelmesh, thingsboard, neo4j, kayenta-fips...
GHSA-4CX2-FC23-5WG6 vulnerabilities
Vulnerabilities for packages: zipkin, pinot-fips, opensearch, elasticsearch-fips, kayenta, pinot, camunda-zeebe, logstash, druid, hadoop-fips, elasticsearch, solr, kserve-modelmesh, thingsboard, neo4j, kayenta-fips...
CVE-2025-55163 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, apache-nifi, celeborn, sonarqube, elasticsearch, management-api-for-apache-cassandra-4.0, prometheus-jmx-exporter, akhq, keycloak, infinispan, opensearch, druid, thingsboard, spark, apicurio-registry, trino, apache-hop-fips,...
GHSA-PRJ3-CCX8-P6X4 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, apache-nifi, celeborn, sonarqube, elasticsearch, management-api-for-apache-cassandra-4.0, prometheus-jmx-exporter, akhq, keycloak, infinispan, opensearch, druid, thingsboard, spark, apicurio-registry, trino, apache-hop-fips,...
UBUNTU-CVE-2025-8713
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...
CVE-2025-8713
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...
CVE-2025-55196
External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...
CVE-2025-55196
External Secrets Operator (github.com/external-secrets/external-secrets) contains a vulnerability in versions 0.15.0–0.19.1 where PushSecret List() calls on Kubernetes Secret and SecretStore resources ignore namespace selectors. This allows an attacker who can create or update PushSecret resource...
CVE-2025-55196
External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...
CVE-2025-55196 External Secrets Operator Missing Namespace Restriction in PushSecret and SecretStore List() Calls Allows Unauthorized Secret Access
External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...
CVE-2025-55196 External Secrets Operator Missing Namespace Restriction in PushSecret and SecretStore List() Calls Allows Unauthorized Secret Access
External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...
GHSA-FCXQ-V2R3-CC8H External Secrets Operator's Missing Namespace Restriction Allows Unauthorized Secret Access
Summary A vulnerability was discovered in the External Secrets Operator where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a namespace selector. This flaw allowed an attacker to use label selectors to list and read...
External Secrets Operator's Missing Namespace Restriction Allows Unauthorized Secret Access
Summary A vulnerability was discovered in the External Secrets Operator where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a namespace selector. This flaw allowed an attacker to use label selectors to list and read...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7685 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.43)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-48989 Source advisory: OSV:GHSA-GQP3-2CVR-X8M3...
CVE-2025-55196: Improper Access Control
External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...