CVE-2025-30749 vulnerabilities

Vulnerabilities for packages: openjdk, openjdk-25-openj9, openjdk-8-openj9, openjdk-crac, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...

GHSA-WPM9-MHXC-7HWJ vulnerabilities

Vulnerabilities for packages: openjdk, openjdk-crac...

CVE-2025-30754 vulnerabilities

Vulnerabilities for packages: openjdk, openjdk-25-openj9, openjdk-8-openj9, openjdk-crac, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...

CVE-2025-7962

In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-48795 vulnerabilities

Vulnerabilities for packages: apache-tika, wildfly...

GHSA-36WV-V2QP-V4G4 vulnerabilities

Vulnerabilities for packages: wildfly, apache-tika, wso2is...

CVE-2025-30192

An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries. The updated version include various mitigations against spoofing attempts of ECS enabled queries by chaining ECS enabled requests and enforcing stricter...

CVE-2025-49087

In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS7 padding mode is used...

CVE-2025-38351

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...

CVE-2025-7339 vulnerabilities

Vulnerabilities for packages: sqlpad, kubeflow-centraldashboard, kubeflow-katib, json-server, argo-workflows, thingsboard, serve, tileserver-gl, code-server...

CVE-2025-7339 vulnerabilities

Vulnerabilities for packages: sqlpad, kubeflow-katib, argo-workflows, gitlab-rails-ce, serve, kubeflow-centraldashboard, tileserver-gl-fips, thingsboard, json-server, arangodb, tileserver-gl, code-server, vitess, gitlab-rails-ce-fips...

CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

CVE-2025-7395

A certificate verification error in wolfSSL when building with the WOLFSSLSYSCACERTS and WOLFSSLAPPLENATIVECERTVALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardles...

CVE-2025-54310

qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp...

CVE-2025-6023

An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...

CVE-2025-6197

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...

CVE-2025-53506 vulnerabilities

Vulnerabilities for packages: tomcat...

GHSA-25XR-QJ8W-C4VF vulnerabilities

Vulnerabilities for packages: tomcat...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, py3-cassandra-medusa, airflow...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: airflow-core, py3-cassandra-medusa, text-generation-inference, request-1276, dask-kubernetes, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, airflow...