CVE-2025-6035

A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel imgbpp, which can result in allocating insufficient memory and subsequently performi...

CVE-2025-6035

A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel imgbpp, which can result in allocating insufficient memory and subsequently performi...

CVE-2025-49146 vulnerabilities

Vulnerabilities for packages: apicurio-registry, keycloak, sonarqube-10...

CVE-2024-38822

Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion...

CVE-2025-41234

Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header with a non-ASCII charset, where the filename attribute is derived from user-supplied input...

CVE-2025-49589

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...

CVE-2024-44905

go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/appendvalue.go...

Moderate: Red Hat Security Advisory: Satellite 6.17.1 Async Update

A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: eslint, rancher-api-ui, prism, lerna, py3-jupyterlab, renovate, opensearch-dashboards, langfuse, npm, kubeflow-pipelines, kubeflow-centraldashboard, pulumi, code-server, vitess, argo-workflows, tileserver-gl, node-gyp, sqlpad, ts-patch...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: eslint, rancher-api-ui, prism, lerna, py3-jupyterlab, renovate, opensearch-dashboards, langfuse, npm, kubeflow-pipelines, kubeflow-centraldashboard, pulumi, code-server, vitess, argo-workflows, tileserver-gl, node-gyp, sqlpad, ts-patch...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: arangodb, eslint, jupyter-base-notebook, gitlab-rails-ce-fips, argo-workflows, opensearch-dashboards, node-gyp, kubeflow-pipelines, langfuse, prism, py3-jupyterlab, kubeflow-centraldashboard, opensearch-dashboards-fips, tileserver-gl, nextcloud-server, sqlpad,...

CVE-2025-49146 vulnerabilities

Vulnerabilities for packages: keycloak, sonarqube-10, camunda-zeebe, apicurio-registry, liquibase...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: arangodb, eslint, jupyter-base-notebook, gitlab-rails-ce-fips, argo-workflows, opensearch-dashboards, node-gyp, kubeflow-pipelines, langfuse, prism, py3-jupyterlab, kubeflow-centraldashboard, opensearch-dashboards-fips, tileserver-gl, nextcloud-server, sqlpad,...

GHSA-HQ9P-PM7W-8P54 vulnerabilities

Vulnerabilities for packages: keycloak, sonarqube-10, camunda-zeebe, apicurio-registry, liquibase...

CVE-2025-6021

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input...

CVE-2025-30167 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-G5HG-P3PH-G8QG vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-48432 vulnerabilities

Vulnerabilities for packages: awx...

CVE-2025-40912

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode. CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362...

CVE-2025-0913

os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with OCREATE and OEXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would...