CVE-2025-48075 vulnerabilities

Vulnerabilities for packages: gatus...

GHSA-HG3G-GPHW-5HHM vulnerabilities

Vulnerabilities for packages: gatus...

CVE-2025-4949 vulnerabilities

Vulnerabilities for packages: sonarqube-10, thingsboard, nextflow, apicurio-registry, wildfly, apache-nifi-registry, gradle...

CVE-2025-48075 vulnerabilities

Vulnerabilities for packages: gatus...

GHSA-HG3G-GPHW-5HHM vulnerabilities

Vulnerabilities for packages: gatus...

GHSA-VRPQ-QP53-QV56 vulnerabilities

Vulnerabilities for packages: apicurio-registry, wildfly, nextflow, gradle, thingsboard, sonarqube-10, apache-nifi-registry...

GHSA-CM76-QM8V-3J95 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, docker-compose-fips, docker-compose, neuvector, neuvector-fips...

CVE-2024-23454

Apache Hadoop’s RunJar.run does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary directory is shared between all local user...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: melange, k3s, zot, wolfictl...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: zot, k3s, cg, wolfictl, melange...

CVE-2025-47291 vulnerabilities

Vulnerabilities for packages: zot, k3s, cg, wolfictl, melange...

CVE-2022-30984

A buffer overflow vulnerability in the Rubrik Backup Service RBS Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root privileges by sending a crafted message to the RBS agent...

CVE-2022-24725

Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home directory on Unix systems when using Bash with the escape or escapeAll functions from the shescape API with the interpolation option set to true. Other tested shells, Dash and Zs...

CVE-2022-29614

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on Unix systems,...

CVE-2021-36151

In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions = 0.15.0. Users should update to version 0.16.0 which addresses this issue...

GHSA-7975-2QR9-G542 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-37372 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-37372 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-47779

Asterisk is an open-source private branch exchange PBX. Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE RFC 3428 authentication do not get proper alignment. An authenticated attacker...

CVE-2025-5024

A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer bei...