5658 matches found
Allocation of Resources Without Limits or Throttling
Overview org.bouncycastle:bcprov-ext-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An...
Allocation of Resources Without Limits or Throttling
Overview org.bouncycastle:bcprov-jdk15 is a package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5. Affected versions of this package are vulnerable to Allocation of Resources Without...
Siemens Web Installer
SUMMARY The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulnerability poses a risk only...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: rook, cert-manager-csi-driver, cilium-cli, gobump, kubernetes-dashboard-metrics-scraper, flux, argocd-image-updater, polaris, cluster-api-ipam-provider-in-cluster, hydra, aws-signer-notation-plugin, crossplane-provider-azure-storage, gatus, hcloud, bento,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: amazon-k8s-cni, node-feature-discovery, apko-fips, rancher-fleet-fips, supercronic, blob-csi, secrets-store-csi-driver-provider-gcp, elvish, metrics-agent-fips, s5cmd, paranoia, ip-masq-agent, falcosidekick, spegel, gosu-fips, glow, cass-operator-fips-no-pvc-delete,...
CVE-2025-8729 MigoXLab LMeterX upload_service.py process_cert_files path traversal
A vulnerability has been found in MigoXLab LMeterX 1.2.0 and classified as critical. Affected by this vulnerability is the function processcertfiles of the file backend/service/uploadservice.py. The manipulation of the argument taskid leads to path traversal. The attack can be launched remotely...
CERT-UA Warns of HTA-Delivered C# Malware Attacks Using Court Summons Lures
The Computer Emergency Response Team of Ukraine CERT-UA has warned of cyber attacks carried out by a threat actor called UAC-0099 targeting government agencies, the defense forces, and enterprises of the defense-industrial complex in the country. The attacks, which leverage phishing emails as an...
Log2Sig: Frequency-Aware Insider Threat Detection Via Multivariate Behavioral Signal Decomposition
Insider threat detection presents a significant challenge due to the deceptive nature of malicious behaviors, which often resemble legitimate user operations. However, existing approaches typically model system logs as flat event sequences, thereby failing to capture the inherent frequency dynami...
SUSE-SU-2025:02592-1 Security update for cosign
This update for cosign fixes the following issues: Update to version 2.5.3 jscSLE-23879: - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego bsc1246725 Changelog: Update to 2.5.3: - Add signing-config create command 4280 - Allow multiple services to be specified for trusted-ro...
UBUNTU-CVE-2024-58261
The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsupported primary key type...
NewStart CGSL MAIN 7.02 : python-requests Vulnerability (NS-SA-2025-0107)
The remote NewStart CGSL host, running version MAIN 7.02, has python-requests packages installed that are affected by a vulnerability: - Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert...
SUSE CVE-2025-47917
Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtlsx509stringtonames takes a head argument that is documented as an output argument. The documentation does not suggest that the function...
CERTFR-2025-ACT-030
creationtimestamp| type| source ---|---|--- 2025-07-21 15:08:30+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3luibgnek2y2r 2025-07-21 15:08:31+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114891850304807565 2025-07-21 15:25:54+00:00| seen|...
CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32386)
The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it...
Azure Linux 3.0 Security Update: helm (CVE-2025-32386)
The version of helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be...
Azure Linux 3.0 Security Update: helm (CVE-2025-32387)
The version of helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32387 advisory. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a...
CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32387)
The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32387 advisory. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be...
CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4
CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...