MiracleLinux 8 : unbound-1.16.2-5.el8_9.6 (AXSA:2024-7684:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7684:04 advisory. A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime...

MiracleLinux 4 : mutt-1.5.20-2.20091214hg736b6a.AXS4.1 (AXSA:2011-711:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-711:01 advisory. Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features...

Fedora 42 : NetworkManager-l2tp (2026-0d1cf2e45b)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0d1cf2e45b advisory. Updated to 1.52.0 release CVE-2025-9615 Verify file permissions for private connections to prevent unprivileged user from using other user's certs. Ensure...

CVE-2025-39871

creationtimestamp| type| source ---|---|--- 2026-01-11 18:02:25+00:00| published-proof-of-concept| Telegram/cYcF66s7AXTUxutuwDW2cBmFYfRe21kzM9XLn8Tc34XCPns 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2023-43206

D-LINK DWL-6610 FWv4.3.0.8B003C was discovered to contain a command injection vulnerability in the function webcertdownloadhandler. This vulnerability allows attackers to execute arbitrary commands via the certDownload parameter...

Siemens Ruggedcom ROX Race Condition (CVE-2024-0397)

A defect was discovered in the Python ssl module where there is a memory race condition with the ssl.SSLContext methods certstorestats and getcacerts. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the...

CVE-2025-38563

creationtimestamp| type| source ---|---|--- 2026-01-08 22:13:17+00:00| published-proof-of-concept| Telegram/EmV5qM2rczBRL4srCtTYo4Qe4hr9TGrLsA4GyGEHonbwa6c 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/...

Security Bulletin: Uncontrolled Resource Allocation in Bouncy Castle Java PKIXCertPathReviewer Leading to Excessive Allocation, which affects IBM watsonx.data

Summary Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows...

CVE-2025-38502

creationtimestamp| type| source ---|---|--- 2026-01-07 17:07:30+00:00| published-proof-of-concept| Telegram/0kJanDSEprBDcoadPdI2GM5tCx1ZeQ142rXTCiGKimcbKNU 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-38485

creationtimestamp| type| source ---|---|--- 2026-01-07 17:06:51+00:00| published-proof-of-concept| Telegram/4Nrc5zp20nWYPncpPH3MCSOxiRhJzp5emMlHV4gTJBiWqI 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-manager-istio-csr, cert-exporter, step-issuer, cert-manager-webhook-pdns...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-manager-istio-csr, cert-exporter, step-issuer, cert-manager-webhook-pdns...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, cert-manager-cmctl, aws-privateca-issuer, cert-exporter-fips, step-issuer, aws-privateca-issuer-fips, step-issuer-fips, cert-exporter, cert-manager-istio-csr...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, cert-manager-cmctl, aws-privateca-issuer, cert-exporter-fips, step-issuer, aws-privateca-issuer-fips, step-issuer-fips, cert-exporter, cert-manager-istio-csr...

CVE-2025-15239

creationtimestamp| type| source ---|---|--- 2026-01-05 06:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10616-cd942-2.html 2026-01-05 10:02:34+00:00| published-proof-of-concept| Telegram/UCM3N0VAiIL0X9q05DMaRnnlz6r5GWtUQVOA9u8gPZf080...

CVE-2025-40263

creationtimestamp| type| source ---|---|--- 2026-01-02 21:50:38+00:00| published-proof-of-concept| Telegram/rY7awwgYiyf4MoJmU46p1ZfRs7aDMuxx9VM2nTHHFeQecLc 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40309

creationtimestamp| type| source ---|---|--- 2026-01-02 18:46:25+00:00| published-proof-of-concept| Telegram/PJ0624gDLdyTO0vVvr-4zwa3ib0JJFcfMDnXcsBI6RfrbkA 2026-01-02 21:51:10+00:00| seen| Telegram/NFzyNG4DYh5RK4Oce721SmUvZOTX79lS9G8FlbiM6HRP0MQ 2026-03-19 00:00:00+00:00| seen|...

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin = 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Marcin Dudek dudekmar - CERT.PL in WordPress Plugin PostX versions = 5.0.3...

OESA-2025-2888 python-requests security update

Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work even method overrides to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. +...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, falco-no-driver, consul-k8s, backup-restore-operator, rke2-runtime-fips, kube-conformance, k3s, vault, etcd-fips, cert-manager-fips, gitlab-rails-ce-fips, etcd, terraform...