EUVD-2018-10701

Malware in sbrugna...

EUVD-2020-12590

Malware in sbrugna...

Adversarial-Resilient RF Fingerprinting: A CNN-GAN Framework for Rogue Transmitter Detection

Radio Frequency Fingerprinting RFF has evolved as an effective solution for authenticating devices by leveraging the unique imperfections in hardware components involved in the signal generation process. In this work, we propose a Convolutional Neural Network CNN based framework for detecting rog...

EUVD-2023-42486

Malicious code in bioql PyPI...

EUVD-2024-30725

Malicious code in bioql PyPI...

EUVD-2022-5492

Malicious code in bioql PyPI...

CLSA-2025-1757962152 libreswan: Fix of CVE-2023-38712

CVE-2023-38712: fix a NULL pointer dereference caused by a duplicated Delete/Notify message which causes the pluto daemon to crash and restart...

Linux Distros Unpatched Vulnerability : CVE-2023-30570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The...

pluto-5.22.5-1.1 on GA media (moderate)

pluto-5.22.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:15466-1 Rating: moderate Cross-References: CVE-2025-47907 CVSS scores: CVE-2025-47907 SUSE : 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2025-47907 SUSE : 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:15465-1 pluto-5.22.5-1.1 on GA media

These are all security issues fixed in the pluto-5.22.5-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2020-1763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, zot, helm-mapkubeapis, helm-operator, helm-push, kargo, eksctl, zarf, envoy-gateway, chartmuseum, cert-manager-cmctl, headlamp, rancher-fleet, helm-docs, trivy-operator, helm-set-status, consul-k8s, k9s, flux-source-controller, trivy, kot...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, zot, helm-mapkubeapis, helm-operator, helm-push, kargo, eksctl, zarf, envoy-gateway, chartmuseum, cert-manager-cmctl, headlamp, rancher-fleet, helm-docs, trivy-operator, helm-set-status, consul-k8s, k9s, flux-source-controller, trivy, kot...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, zot, helm-mapkubeapis, helm-operator, helm-push, kargo, eksctl, zarf, envoy-gateway, chartmuseum, cert-manager-cmctl, headlamp, rancher-fleet, helm-docs, trivy-operator, helm-set-status, consul-k8s, k9s, flux-source-controller, trivy, kot...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, zot, helm-mapkubeapis, helm-operator, helm-push, kargo, eksctl, zarf, envoy-gateway, chartmuseum, cert-manager-cmctl, headlamp, rancher-fleet, helm-docs, trivy-operator, helm-set-status, consul-k8s, k9s, flux-source-controller, trivy, kot...

OPENSUSE-SU-2025:15184-1 pluto-5.21.7-1.1 on GA media

These are all security issues fixed in the pluto-5.21.7-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-32973

Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. In affected versions an attacker with the ability to actively intercept network traffic would be able to use a specifically-crafted certificate to fool Pluto into trusting it to be the intended remote for the TLS session...

CVE-2021-36739

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting XSS attacks...

CVE-2021-36737

The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact...

CVE-2021-36738

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...