10213 matches found
CVE-2025-52891
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xml, and at least...
CVE-2025-52891
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xml, and at least...
CVE-2024-35164
The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based protocols like SSH. If a malicious user has access to a text-based connection, a specially-crafted sequence of console codes could allow arbitrary code to be...
CVE-2025-30360 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CVE-2025-52999 vulnerabilities
Vulnerabilities for packages: confluent-common-docker, cassandra-reaper, scala, spark, tez, gradle-stage0, druid, cassandra...
CVE-2025-30359 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-9JGG-88MC-972H vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-H46C-H94J-95F3 vulnerabilities
Vulnerabilities for packages: confluent-common-docker, cassandra-reaper, scala, spark, tez, gradle-stage0, druid, cassandra...
CVE-2025-30359 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows, arangodb...
CVE-2025-30360 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows, arangodb...
GHSA-4V9V-HFQ4-RM2V vulnerabilities
Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows, arangodb...
GHSA-9JGG-88MC-972H vulnerabilities
Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows, arangodb...
CVE-2025-52999 vulnerabilities
Vulnerabilities for packages: gradle-stage0, localstack, celeborn, druid, cassandra, cassandra-reaper, confluent-common-docker, spark, elasticsearch, hadoop-fips, spark-fips, tez, cassandra-fips, hadoop-client-modules, scala...
CVE-2025-53103
JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are...
CVE-2025-6297
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and...
GHSA-H3QP-HWVR-9XCQ vulnerabilities
Vulnerabilities for packages: octo-sts...
CVE-2025-52477 vulnerabilities
Vulnerabilities for packages: octo-sts...
CVE-2025-32462
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...