10213 matches found
GHSA-J3G3-5QV5-52MJ vulnerabilities
Vulnerabilities for packages: jruby, truffleruby, kube-fluentd-operator...
CVE-2024-58237
In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers. Making...
CVE-2025-21763 affecting package kernel for versions less than 5.15.180.1-1
CVE-2025-21763 affecting package kernel for versions less than 5.15.180.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-21639 affecting package kernel for versions less than 5.15.179.1-1
CVE-2025-21639 affecting package kernel for versions less than 5.15.179.1-1. A patched version of the package is available...
CVE-2024-58005 affecting package kernel for versions less than 5.15.179.1-1
CVE-2024-58005 affecting package kernel for versions less than 5.15.179.1-1. A patched version of the package is available...
CVE-2025-47268
ping in iputils before 20250602 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication...
GHSA-859W-5945-R5V3 vulnerabilities
Vulnerabilities for packages: vite...
CVE-2025-3501 vulnerabilities
Vulnerabilities for packages: keycloak-fips...
CVE-2025-3910 vulnerabilities
Vulnerabilities for packages: keycloak-fips...
CVE-2025-46565 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse, vite...
CVE-2025-2545
Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...
CVE-2025-2545
Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...
GHSA-GCQF-F89C-68HV vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
CVE-2025-37799
In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3processxdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 that is, packet sizes between 128 - 3k bytes. We noticed MTU-related connectivity issues with Cilium's...
CVE-2024-58135
Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...
CVE-2025-47229
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service varsetleavequiet assertion failure and application exit via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code...
CVE-2022-21546
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sgwritesame --ndob" we...
CVE-2025-4215
A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...