24725 matches found
CVE-2025-58445
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...
USN-7740-1: LibEtPan vulnerability
It was discovered that LibEtPan incorrectly handled memory when parsing IMAP STATUS responses. A remote attacker could possibly use this issue to cause LibEtPan to crash, resulting in a denial of service...
USN-7740-1 libetpan vulnerability
It was discovered that LibEtPan incorrectly handled memory when parsing IMAP STATUS responses. A remote attacker could possibly use this issue to cause LibEtPan to crash, resulting in a denial of service...
CVE-2025-10081
creationtimestamp| type| source ---|---|--- 2025-09-08 07:40:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lycpazp2zq2t...
CVE-2025-58445
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...
CVE-2025-58445 Atlantis Exposes Service Version Publicly on /status API Endpoint
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...
CVE-2025-58445 Atlantis Exposes Service Version Publicly on /status API Endpoint
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...
CVE-2025-58445 Atlantis Exposes Service Version Publicly on /status API Endpoint
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...
CVE-2025-58445
CVE-2025-58445 concerns the Atlantis self-hosted Go application. The connected document GO-2025-3940 describes Atlantis exposing the service version publicly via the "/status" API endpoint in github.com/runatlantis/atlantis. The Initial document states that this information disclosure could allow...
Exploit for Observable Discrepancy in Intel Atom_C
This is a tool for checking the state of software mitigations against Spectre and Meltdown vulnerabilities. It uses the NtQuerySystemInformation API call to report the data as seen by the Windows Kernel. The tool is currently optimized for Microsoft Windows 7-10 and uses the best-working exploit...
CVE-2025-9493
creationtimestamp| type| source ---|---|--- 2025-09-06 07:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly5ojlplrr2d...
CVE-2025-48523
creationtimestamp| type| source ---|---|--- 2025-09-06 04:33:00+00:00| seen| Telegram/ggl3aR0Zomy6tbkIzotyQv6nNno-mBvmzvIrWqiwOPhmuE...
Linux Distros Unpatched Vulnerability : CVE-2025-39685
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comedi: pcl726: Prevent invalid irq number The reproducer passed in an irq number0x80008000 that was too large, which triggered the oob. Added an interrupt numb...
Linux Distros Unpatched Vulnerability : CVE-2025-39698
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/futex: ensure iofutexwait cleans up properly on failure The iofutexdata is allocated upfront and assigned to the iokiocb asyncdata field, but the reques...
PT-2025-36447
CVE-2025-58909 - OpenVAS Scanner Not Used CVE ID : CVE-2025-58909 Published : Sept. 6, 2025, 3:15 a.m. | 3 hours, 53 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Atlantis Exposes Service Version Publicly on /status API Endpoint
Summary Atlantis publicly exposes detailed version information on its /status endpoint. This information disclosure could allow attackers to identify and target known vulnerabilities associated with the specific versions, potentially compromising the service's security posture. Details The /statu...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the /status endpoint, which returns detailed version and build information. An attacker can gain insights into the software version and configuration by sending unauthenticated requests to this endpoint and...
GHSA-XH7V-965R-23F7 Atlantis Exposes Service Version Publicly on /status API Endpoint
Summary Atlantis publicly exposes detailed version information on its /status endpoint. This information disclosure could allow attackers to identify and target known vulnerabilities associated with the specific versions, potentially compromising the service's security posture. Details The /statu...
Security update for cloud-init
This update for cloud-init fixes the following issues: Update to version 25.1.3: CVE-2024-6174: Unpriveleged user could trigger hotplug-hook commands bsc1245403. None security fixes: Rebase cloud-init to 24.4 or higher bsc1239715, jscPED-8680. Fixed cloud-init --debug status bsc1228414. Using...