Advisory ROSA-SA-2025-3055

Software: cups 2.2.6 OS: ROSA Virtualization 3.1 unaffected versions = cups-2.2.6-63.rv31 affected versions cups-2.2.6-63.rv31 CVE-ID: CVE-2025-58060 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A vulnerability in the CUPS Common UNIX Printing System is related to flaws in the authentication procedure...

EUVD-2025-41872

Malicious code in sinta-bakwan100-ruro npm...

EUVD-2025-42260

Malicious code in qori-otak-otak46-breki npm...

EUVD-2025-42019

Malicious code in rudi-lepet28-sluey npm...

Fedora: Security Advisory (FEDORA-2025-d9921d4ed5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-11980

creationtimestamp| type| source ---|---|--- 2025-11-08 09:49:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m54cvwdl672u 2025-11-08 11:45:42+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m54jeuvfouj2...

CVE-2025-64493

creationtimestamp| type| source ---|---|--- 2025-11-08 06:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m53w3ct3aq2s 2025-11-11 04:16:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m5dboxq2222d...

CVE-2025-12911

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2025-38217

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary files from the virt-launcher pod's file system. This issue stems from improper symlink handling when mounting PVC disks into a VM...

CVE-2025-43335

creationtimestamp| type| source ---|---|--- 2025-11-07 21:18:36+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m52ywq2m6s2k...

CVE-2025-64512

creationtimestamp| type| source ---|---|--- 2025-11-07 19:53:07+00:00| published-proof-of-concept| https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-wf5f-4jwr-ppcp 2025-11-07 20:36:24+00:00| published-proof-of-concept|...

CVE-2025-64329 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, kaniko-fips, cluster-api-helm-controller-fips, trivy-fips, neuvector, steampipe, cert-manager-cmctl-fips, nerdctl-fips, opa, tekton-pipelines-fips, cluster-api-helm-controller, neuvector-scanner, spegel, fuse-overlayfs-snapshotter, gitlab-rails-ce...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: podman, k3s, node-feature-discovery, grafana-alloy, nvidia-container-toolkit, falco-no-driver, buildah, sriov-network-device-plugin, kubernetes...

CVE-2025-4519

creationtimestamp| type| source ---|---|--- 2025-11-07 06:22:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4zguh5sqc26 2025-11-07 07:10:11+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zjjmanbsf2 2025-11-07 07:50:08+00:00| seen|...

CVE-2025-64323

creationtimestamp| type| source ---|---|--- 2025-11-07 05:40:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4zeizjr7k2s...

DEBIAN-CVE-2025-11206

Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2025-38168

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxNetworkController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

CVE-2025-62066

creationtimestamp| type| source ---|---|--- 2025-11-06 16:59:09+00:00| seen| https://gist.github.com/Darkcrai86/dedefe68ad678d79122fe470170139c1...

CVE-2025-7039

creationtimestamp| type| source ---|---|--- 2025-11-06 08:05:06+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m4x44wwmum2z...

CVE-2025-64473

creationtimestamp| type| source ---|---|--- 2025-11-06 06:45:50+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wxo4d7gqd2 2025-11-06 07:47:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4x35jpwfy2n...