CVE-2025-41234

Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header with a non-ASCII charset, where the filename attribute is derived from user-supplied input...

CVE-2025-49589

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...

CVE-2024-44905

go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/appendvalue.go...

Moderate: Red Hat Security Advisory: Satellite 6.17.1 Async Update

A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: argo-workflows, rancher-api-ui, kubeflow-pipelines, tileserver-gl, node-gyp, jupyter-base-notebook, kubeflow-centraldashboard, lerna, eslint, pulumi, vitess, prism, renovate, py3-jupyterlab, langfuse, code-server, opensearch-dashboards, ts-patch, npm, sqlpad...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: argo-workflows, rancher-api-ui, kubeflow-pipelines, tileserver-gl, node-gyp, jupyter-base-notebook, kubeflow-centraldashboard, lerna, eslint, pulumi, vitess, prism, renovate, py3-jupyterlab, langfuse, code-server, opensearch-dashboards, ts-patch, npm, sqlpad...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: argo-workflows, langfuse-fips, tensorflow-cpu-jupyter, tileserver-gl-fips, bash-language-server, emsdk, nextcloud-server, kibana, sqlpad, code-server, kubeflow-pipelines, renovate, py3-jupyterlab, prism, drupal, npm, jupyter-base-notebook, wazuh-dashboard, vitess,...

CVE-2025-49146 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apicurio-registry, keycloak, liquibase, sonarqube-10...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: argo-workflows, langfuse-fips, tensorflow-cpu-jupyter, tileserver-gl-fips, bash-language-server, emsdk, nextcloud-server, kibana, sqlpad, code-server, kubeflow-pipelines, renovate, py3-jupyterlab, prism, drupal, npm, jupyter-base-notebook, wazuh-dashboard, vitess,...

GHSA-HQ9P-PM7W-8P54 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apicurio-registry, keycloak, liquibase, sonarqube-10...

CVE-2025-6021

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input...

CVE-2025-30167 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, jupyter-docker-stacks...

GHSA-G5HG-P3PH-G8QG vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-48432 vulnerabilities

Vulnerabilities for packages: awx...

CVE-2025-40912

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode. CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362...

CVE-2025-0913

os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with OCREATE and OEXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would...

CVE-2025-0913

os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with OCREATE and OEXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would...

CVE-2025-40914

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328...

CVE-2025-49140 vulnerabilities

Vulnerabilities for packages: k3s...

GHSA-2X5J-VHC8-9CWM vulnerabilities

Vulnerabilities for packages: terragrunt, gitness, aactl, crossplane-provider-azure-authorization, crossplane-provider-aws-iam, wal-g, terraform-provider-azurerm, crossplane-provider-aws-ec2, tkn, crossplane, actions-runner-controller, xeol, crossplane-provider-family-azure,...