CVE-2025-14343

creationtimestamp| type| source ---|---|--- 2025-05-06 14:49:58+00:00| seen| https://gist.github.com/chrispatrick/ef9adba1d09172543266af24c83130a8 2025-05-15 15:33:07+00:00| seen| https://gist.github.com/chrispatrick/23906e07438c80d1d0b1225f644927de 2026-02-26 13:16:52+00:00| seen|...

GHSA-7XQ5-54JP-2MFG Rasa Pro Missing Authentication For Voice Connector APIs

Vulnerability A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticate...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, vertical-pod-autoscaler-fips, packer-fips, crossplane-provider-aws-rds, temporal-ui-server, thanos-fips, etcd-fips, hubble-fips, kubernetes-csi-external-provisioner, tfsec, prometheus-operator-fips, vertical-pod-autoscaler,...

GHSA-5C3C-54FJ-WG2V vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2025-1146

CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...

CVE-2025-1146 CrowdStrike Falcon Sensor for Linux TLS Issue

CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...

CVE-2020-8349

An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System CNOS’ optional REST API management interface. This interface is disabled by default and not vulnerable unless enabled. When enabled, it is only vulnerable where...

Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security

Security Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security Share January 30th, 2025 Hey Opera users! You might have seen that Opera for Android has achieved a new security-focused milestone: If you search for Opera for Android...

Wind River Software VxWorks 6.9 Weak Password Hashing Algorithms

The password hashing algorithm introduced in VxWorks 6.9 is considered insecure. This algorithm employs a single iteration of SHA-256 combined with a salt to hash user passwords. The password hashing algorithm used in VxWorks 7 24.04 is also considered insecure. This algorithm uses 5,000 iteratio...

CVE-2021-42718

Replicated Classic versions prior to 2.53.1 are vulnerable to an Information Disclosure vulnerability in the Admin Console API on port 8800 . Authenticated users with Admin Console access can retrieve container definitions, which may expose sensitive data such as application secrets , passwords, ...

CVE-2025-21380

creationtimestamp| type| source ---|---|--- 2025-01-09 22:16:15+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lfdpdstgpu2l 2025-01-09 22:39:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113800798859509630 2025-01-09 23:14:55+00:00| seen|...

CISCO-SA-20190807-ASA

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:48+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793666890201...

CVE-2024-49106

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:22:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113630390227389899 2024-12-13 11:17:43+00:00| seen|...

AZL-53453 CVE-2024-53859 affecting package gh for versions less than 2.62.0-5

go-gh is a Go module for interacting with the gh utility and the GitHub API from the command line. A security vulnerability has been identified in go-gh that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. go-gh sources authentication tokens...

Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download Vulnerabilities

Siemens Energy Omnivise T3000 version 8.2 SP3 suffers from local privilege escalation, cleartext storage of passwords in configuration and log files, file system access allowing for arbitrary file download, and IP whitelist bypass...

Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Siemens Energy Omnivise T3000 vulnerable version: =8.2 SP3 fixed version: see solution section CVE number: CVE-2024-38876, CVE-2024-3887...

GHSA-V7VF-F5Q6-M899 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2024-43637

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:40:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471681854033023 2025-01-09 17:18:30+00:00| seen|...

CVE-2024-49013

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:41:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113472154201097723 2026-07-04 02:07:07+00:00| seen|...

TikTok ordered to close Canada offices following “national security review”

The Government of Canada ordered the TikTok Technology Canada Inc. to close its offices in the country following a national security review. This decision was made in accordance with the Investment Canada Act, which allows for the review of foreign investments that may be injurious to Canada’s...