10156 matches found
GHSA-VQFR-H8MV-GHFJ vulnerabilities
Vulnerabilities for packages: checkov, mitmproxy, jupyter-base-notebook, kubeflow-pipelines-visualization-server, kserve, airflow, reflex...
GHSA-6JGM-J7H2-2FQG vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, grafana-alloy, sqlexporter, opentelemetry-collector-contrib...
CVE-2025-3891
A flaw was found in the modauthopenidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability...
CVE-2025-31650
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial ...
CVE-2025-31651
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those...
CVE-2025-31650
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial ...
GHSA-3G36-GF7C-75QW vulnerabilities
Vulnerabilities for packages: mattermost-fips...
CVE-2025-41395 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-XFQ9-HH5X-XFQ9 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-689C-XQ7X-XJWF vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-FR22-5377-F3P7 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
CVE-2025-24866 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
CVE-2025-22235
EndpointRequest.to creates a matcher for null/ if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be affected by this if all the following conditions are met: You use Spring Security EndpointRequest.to has been used in a Spri...
CVE-2025-46687
quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...
CVE-2025-46688
quickjs-ng through 0.9.0 has an incorrect size calculation in JSReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...
CVE-2025-2866
Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This...
[SECURITY] Fedora 41 Update: java-17-openjdk-portable-17.0.15.0.6-1.fc40
The OpenJDK 17 runtime environment - portable edition...
[SECURITY] Fedora 41 Update: java-latest-openjdk-24.0.1.0.9-1.rolling.fc41
The OpenJDK 24 runtime environment...