CVE-2025-41234

Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header with a non-ASCII charset, where the filename attribute is derived from user-supplied input...

CVE-2025-49589

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...

CVE-2024-44905

go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/appendvalue.go...

Moderate: Red Hat Security Advisory: Satellite 6.17.1 Async Update

A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: rancher-api-ui, lerna, renovate, node-gyp, sqlpad, langfuse, eslint, kubeflow-centraldashboard, ts-patch, npm, kubeflow-pipelines, py3-jupyterlab, opensearch-dashboards, code-server, pulumi, jupyter-base-notebook, argo-workflows, tileserver-gl, prism, vitess...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, lerna, renovate, node-gyp, sqlpad, langfuse, eslint, kubeflow-centraldashboard, ts-patch, npm, kubeflow-pipelines, py3-jupyterlab, opensearch-dashboards, code-server, pulumi, jupyter-base-notebook, argo-workflows, tileserver-gl, prism, vitess...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: arangodb, emsdk, tensorflow-cpu-jupyter, sqlpad, eslint, opensearch-dashboards-fips, jupyter-base-notebook, renovate, drupal, pulumi, kubeflow-centraldashboard, argo-workflows, kubeflow-pipelines, langfuse-fips, vitess, wazuh-dashboard, code-server, rancher-api-ui,...

CVE-2025-49146 vulnerabilities

Vulnerabilities for packages: keycloak, liquibase, sonarqube-10, apicurio-registry, camunda-zeebe...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: arangodb, emsdk, tensorflow-cpu-jupyter, sqlpad, eslint, opensearch-dashboards-fips, jupyter-base-notebook, renovate, drupal, pulumi, kubeflow-centraldashboard, argo-workflows, kubeflow-pipelines, langfuse-fips, vitess, wazuh-dashboard, code-server, rancher-api-ui,...

GHSA-HQ9P-PM7W-8P54 vulnerabilities

Vulnerabilities for packages: keycloak, liquibase, sonarqube-10, apicurio-registry, camunda-zeebe...

CVE-2025-6021

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input...

CVE-2025-30167 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-G5HG-P3PH-G8QG vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-48432 vulnerabilities

Vulnerabilities for packages: awx...

CVE-2025-40912

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode. CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362...

CVE-2025-0913

os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with OCREATE and OEXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would...

CVE-2025-0913

os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with OCREATE and OEXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would...

CVE-2025-40914

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328...

CVE-2025-49140 vulnerabilities

Vulnerabilities for packages: k3s...

GHSA-2X5J-VHC8-9CWM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, vcluster, extism, ksops, lazygit, crossplane-provider-aws-eks, argo-rollouts, crossplane-provider-aws-cloudwatchlogs, pulumi-language-dotnet, snyk-cli, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudfront,...