manse.sajuplus.net Cross Site Scripting vulnerability OBB-4032261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bhhs.digitalarchive.us Cross Site Scripting vulnerability OBB-4031880

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Event Endpoint Management is affected by multiple vulnerabilities.

Summary IBM Event Endpoint Management is affected by multiple vulnerabilities. These are affecting the operator and frontend components. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service...

mtvgmbh.com Cross Site Scripting vulnerability OBB-4031836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

einmallaken.de Cross Site Scripting vulnerability OBB-4031816

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Multiple Vulnerabilities in IBM Events Operator

Summary Multiple vulnerabilities were addressed in IBM Events Operator version 5.1.0 Vulnerability Details CVEID:CVE-2023-0464 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error related to the verification of X.509 certificate chains that include policy constraints. By...

autoupdate.virtualdj.com Cross Site Scripting vulnerability OBB-4031667

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cmucia.cmu.edu.tw Cross Site Scripting vulnerability OBB-4031483

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cad.murtfeldt.de Cross Site Scripting vulnerability OBB-4031466

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

203.198.161.198 Cross Site Scripting vulnerability OBB-4031261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

128.151.71.78 Cross Site Scripting vulnerability OBB-4030776

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (>=1.9.0, <=1.9.2), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (>=1.9.0, <=1.9.2) +24 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.13.6.final)

io.quarkus:quarkus-resteasy MAVEN version 1.13.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests =1.9.0, =1.9.0, =1.9.2 -...

io.debezium:debezium-server (1.9.0.alpha1), io.debezium:debezium-server-core (1.9.0.alpha1) +181 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.6.2.final)

io.quarkus:quarkus-resteasy MAVEN version 2.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.debezium:debezium-server 1.9.0.alpha1 - io.debezium:debezium-server-core 1.9.0.alpha1 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (2.0.0.beta2), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (2.0.0.beta2) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.0.1.final)

io.quarkus:quarkus-resteasy MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests 2.0.0.beta2 -...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (osp-director-operator) security update

An update for osp-director-operator-container is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-22868 vulnerabilities

Vulnerabilities for packages: kargo, flux-helm-controller, timoni, policy-controller, crossplane, grafana-operator, k9s, docker-compose, rabbitmq-cluster-operator, gcsfuse, lvm-driver, flux-source-controller, conftest, fulcio, velero-plugin-for-aws, kserve-modelmesh-serving, cilium-cli, portieris...

CVE-2025-22868 vulnerabilities

Vulnerabilities for packages: whereabouts, dagger, oauth2-proxy, blob-csi-fips, cass-operator-fips, crossplane, velero, dex, velero-plugin-for-aws-fips, cloud-provider-aws-fips, dynamic-localpv-provisioner-fips, fluent-operator-fips, wave, knative-client, karpenter,...

NVIDIA Container Toolkit Race Condition Code Execution

The vulnerability of the software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...