GHSA-7HPQ-3G6W-PVHF vulnerabilities

Vulnerabilities for packages: trino, flyway...

CVE-2025-24790 vulnerabilities

Vulnerabilities for packages: trino, flyway...

CVE-2025-24789 vulnerabilities

Vulnerabilities for packages: trino, flyway...

CVE-2025-24374

Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the left side of the operator. This vulnerability is fixed in 3.19.0...

[SECURITY] Fedora 40 Update: golang-1.22.11-1.fc40

The Go Programming Language...

GHSA-C476-J253-5RGQ vulnerabilities

Vulnerabilities for packages: spark...

mariadb:10.5 security update

galera Judy mariadb 3:10.5.27-1 - Rebase to 10.5.27 3:10.5.26-1 - Rebase to 10.5.26 3:10.5.25-1 - Rebase to 10.5.25...

CVE-2024-29869 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-P953-3J66-HG45 vulnerabilities

Vulnerabilities for packages: spark-scala-2.13...

CVE-2024-23953 vulnerabilities

Vulnerabilities for packages: spark-scala-2.13...

python-jinja2 security update

2.10.1-6 - Security fix for CVE-2024-56326 Resolves: RHEL-74677...

CVE-2024-0149

NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure...

CVE-2025-0750

A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...

keepalived security update

2.1.5-10 - CVE-2024-41184 Resolves: RHEL-49561...

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

CVE-2025-24356

fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...

CVE-2025-24368

Cacti is an open source performance and fault management framework. Some of the data stored in automationtreerules.php is not thoroughly checked and is used to concatenate the SQL statement in buildruleitemfilter function from lib/apiautomation.php, resulting in SQL injection. This vulnerability ...

CVE-2024-54145

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the getdiscoveryresults function of automationdevices.php using the network parameter. This vulnerability is fixed in 1.2.29...

CVE-2024-55228

A cross-site scripting XSS vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

CVE-2024-55227

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...