CVE-2023-43206

D-LINK DWL-6610 FWv4.3.0.8B003C was discovered to contain a command injection vulnerability in the function webcertdownloadhandler. This vulnerability allows attackers to execute arbitrary commands via the certDownload parameter...

Siemens Ruggedcom ROX Race Condition (CVE-2024-0397)

A defect was discovered in the Python ssl module where there is a memory race condition with the ssl.SSLContext methods certstorestats and getcacerts. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the...

CVE-2025-38563

creationtimestamp| type| source ---|---|--- 2026-01-08 22:13:17+00:00| published-proof-of-concept| Telegram/EmV5qM2rczBRL4srCtTYo4Qe4hr9TGrLsA4GyGEHonbwa6c 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/...

Security Bulletin: Uncontrolled Resource Allocation in Bouncy Castle Java PKIXCertPathReviewer Leading to Excessive Allocation, which affects IBM watsonx.data

Summary Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows...

CVE-2025-38502

creationtimestamp| type| source ---|---|--- 2026-01-07 17:07:30+00:00| published-proof-of-concept| Telegram/0kJanDSEprBDcoadPdI2GM5tCx1ZeQ142rXTCiGKimcbKNU 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-38485

creationtimestamp| type| source ---|---|--- 2026-01-07 17:06:51+00:00| published-proof-of-concept| Telegram/4Nrc5zp20nWYPncpPH3MCSOxiRhJzp5emMlHV4gTJBiWqI 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, cert-manager-istio-csr, cert-exporter, aws-privateca-issuer...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, cert-manager-istio-csr, cert-exporter, aws-privateca-issuer...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-istio-csr, cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, aws-privateca-issuer, cert-exporter, step-issuer, step-issuer-fips, cert-exporter-fips, aws-privateca-issuer-fips...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-istio-csr, cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, aws-privateca-issuer, cert-exporter, step-issuer, step-issuer-fips, cert-exporter-fips, aws-privateca-issuer-fips...

CVE-2025-15239

creationtimestamp| type| source ---|---|--- 2026-01-05 06:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10616-cd942-2.html 2026-01-05 10:02:34+00:00| published-proof-of-concept| Telegram/UCM3N0VAiIL0X9q05DMaRnnlz6r5GWtUQVOA9u8gPZf080...

CVE-2025-40263

creationtimestamp| type| source ---|---|--- 2026-01-02 21:50:38+00:00| published-proof-of-concept| Telegram/rY7awwgYiyf4MoJmU46p1ZfRs7aDMuxx9VM2nTHHFeQecLc 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40309

creationtimestamp| type| source ---|---|--- 2026-01-02 18:46:25+00:00| published-proof-of-concept| Telegram/PJ0624gDLdyTO0vVvr-4zwa3ib0JJFcfMDnXcsBI6RfrbkA 2026-01-02 21:51:10+00:00| seen| Telegram/NFzyNG4DYh5RK4Oce721SmUvZOTX79lS9G8FlbiM6HRP0MQ 2026-03-19 00:00:00+00:00| seen|...

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin = 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Marcin Dudek dudekmar - CERT.PL in WordPress Plugin PostX versions = 5.0.3...

OESA-2025-2888 python-requests security update

Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work even method overrides to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. +...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: consul-k8s, rke2-runtime-fips, falco-no-driver, backup-restore-operator, cert-manager-fips, gitlab-rails-ce, terraform, etcd, etcd-fips, vault, gitlab-rails-ce-fips, k3s...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: consul-k8s, rke2-runtime-fips, falco-no-driver, backup-restore-operator, cert-manager-fips, gitlab-rails-ce, terraform, etcd, etcd-fips, vault, gitlab-rails-ce-fips, k3s...

CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25

CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25. A patched version of the package is available...

Mozilla Firefox ESR < 17.0.5

The version of Firefox ESR installed on the remote Windows host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory. - CERTDecodeCertPackage reads bytes outside the input bufferCVE-2013-0791 CVE-2013-0791 Note that Nessus has not tested for...

Mozilla Thunderbird ESR < 17.0.5

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory. - CERTDecodeCertPackage reads bytes outside the input bufferCVE-2013-0791 CVE-2013-0791 Note that Nessus has n...