10141 matches found
CVE-2025-0913
os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with OCREATE and OEXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would...
CVE-2025-40914
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328...
GHSA-2X5J-VHC8-9CWM vulnerabilities
Vulnerabilities for packages: gitsign, actions-runner-controller, rclone, crossplane-provider-family-aws, pulumi, lazygit, extism, crossplane-provider-aws-firehose, pulumi-kubernetes-operator, kots, pulumi-language-java, crossplane-provider-azure, crossplane-provider-aws-sqs, tkn, tfsec,...
CVE-2025-49140 vulnerabilities
Vulnerabilities for packages: k3s...
GHSA-F26W-GH5M-QQ77 vulnerabilities
Vulnerabilities for packages: k3s...
GHSA-VGQ5-3255-V292 vulnerabilities
Vulnerabilities for packages: apache-nifi, opensearch, logstash, wildfly, druid, thingsboard, zipkin, apicurio-registry, strimzi-kafka-operator...
GHSA-2X5J-VHC8-9CWM vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface, go-licenses, guac, tekton-chains, buildkitd-fips, crossplane-provider-aws-eks, kyverno, tekton-pipelines-fips, crossplane-provider-keycloak-fips, argo-events-fips, xeol, argo-rollouts-fips, opentofu-fips, crossplane-provider-aws-sqs,...
CVE-2025-5986
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data e.g. using /dev/urandom on Linux or to...
CVE-2025-5991
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a POST request and the simultaneous...
CVE-2025-5991
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a POST request and the simultaneous...
[SECURITY] Fedora 42 Update: qt6-qttranslations-6.9.1-1.fc42
Qt6 - QtTranslations module...
[SECURITY] Fedora 42 Update: qt6-qtquick3dphysics-6.9.1-1.fc42
The Qt 6 Quick3D Physics library...
[SECURITY] Fedora 42 Update: qt6-qtdeclarative-6.9.1-1.fc42
Qt6 - QtDeclarative component...
CVE-2025-49091
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...
CVE-2025-49133
Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds OOB read vulnerability. The...
CVE-2024-47081 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, reflex, kubeflow-jupyter-web-app, py3-pipenv, emissary, ggshield, mlflow, py3-requests, airflow, jupyter-base-notebook, jwt-tool, kubeflow-katib, pypy-3.11, kubeflow-pipelines-visualization-server, az, pypy-3.10, confluent-docker-utils, superset,...
GHSA-9HJG-9R4M-MVJ7 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, reflex, kubeflow-jupyter-web-app, py3-pipenv, emissary, ggshield, mlflow, py3-requests, airflow, jupyter-base-notebook, jwt-tool, kubeflow-katib, pypy-3.11, kubeflow-pipelines-visualization-server, az, pypy-3.10, confluent-docker-utils, superset,...
CVE-2025-30167 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, kubeflow-pipelines-visualization-server...