10213 matches found
CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
CVE-2025-68156 vulnerabilities
Vulnerabilities for packages: nats, kargo, argo-workflows, kine, opentelemetry-collector, jaeger, vale, k3s, argo-cd, datadog-agent, aws-otel-collector, verticadb-operator, grafana-alloy, k8sgpt, opentelemetry-collector-contrib, coredns, amazon-cloudwatch-agent, kserve, splunk-otel-collector,...
GHSA-CFPF-HRX2-8RV6 vulnerabilities
Vulnerabilities for packages: argo-rollouts-fips, nats-fips, k8sgateway-fips, elastic-agent, eks-distro, k3s, kubeflow-pipelines, eks-distro-fips, k8sgpt, opentelemetry-collector, vale, datadog-agent-fips, verticadb-operator-fips, nrdot-collector-k8s-fips, rke2-runtime, aws-otel-collector,...
GHSA-9P56-P6MW-W8QC vulnerabilities
Vulnerabilities for packages: jenkins...
CVE-2025-67636 vulnerabilities
Vulnerabilities for packages: jenkins...
AZL-79232 CVE-2025-68146 affecting package python-filelock 3.0.12-13
filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation...
CVE-2025-68236
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down PC=3 According to UFS specifications, the power-off sequence for a UFS device includes: - Sending an SSU command with PowerCondition=3 and await a response. - Asserting...
CVE-2025-68203
Removed by vendor...
CVE-2025-68169
In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix deadlock in memory allocation under spinlock Fix a AA deadlock in refillskbs where memory allocation while holding skbpool-lock can trigger a recursive lock acquisition attempt. The deadlock scenario occurs when the...
GHSA-MWV6-3258-Q52C vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse, langfuse-fips...
CVE-2025-22103 affecting package kernel for versions less than 6.6.117.1-1
CVE-2025-22103 affecting package kernel for versions less than 6.6.117.1-1. A patched version of the package is available...
CVE-2025-65430
An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as isactive=False after having handed tokens for that user while the account was still active had no effect. Fixed the access/refresh tokens are now rejected...
GHSA-VX9Q-RHV9-3JVG vulnerabilities
Vulnerabilities for packages: trino, druid, apache-pulsar, spark, apache-nifi...
CVE-2025-67721 vulnerabilities
Vulnerabilities for packages: trino, druid, apache-pulsar, spark, apache-nifi...
CVE-2025-67721 vulnerabilities
Vulnerabilities for packages: spark, ranger, apache-pulsar-fips, hadoop-fips, apache-pulsar, geoserver, trino, pinot, pinot-fips, apache-nifi, spark-fips, druid...
SUSE CVE-2025-53040
unknown...
SUSE CVE-2025-53045
unknown...
SUSE CVE-2025-53054
unknown...
CVE-2025-67749
PCSX2 is a free and open-source PlayStation 2 PS2 emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory...