CVE-2024-52559

creationtimestamp| type| source ---|---|--- 2025-02-27 13:27:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5670 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-21792

creationtimestamp| type| source ---|---|--- 2025-02-27 06:11:20+00:00| seen| https://t.me/cvedetector/18998 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2021-46877

creationtimestamp| type| source ---|---|--- 2025-02-26 19:24:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5588 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

AZL-57437 CVE-2025-22869 affecting package cert-manager for versions less than 1.11.2-20

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57407 CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57312 CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CVE-2021-47658

creationtimestamp| type| source ---|---|--- 2025-02-26 02:23:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5424 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-49296

creationtimestamp| type| source ---|---|--- 2025-02-26 02:23:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5421 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: render-template, thanos, prometheus-pushgateway, kubernetes-ingress-defaultbackend, trino, dataplaneapi, kiali, grafana-rollout-operator, vt-cli, temporal-server, crane, esbuild, kserve-rest-proxy, kubernetes-dashboard-metrics-scraper,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: ferretdb, k8sgpt, hubble-ui-backend-fips, temporal-server, velero, doppler-kubernetes-operator, go-md2man, gh, slsa-verifier, fq, nri-haproxy, dockerize-fips, kubernetes-csi-external-resizer, rabbitmq-cluster-operator, cortex, prometheus-alertmanager-fips,...

AZL-57126 CVE-2025-27144 affecting package cert-manager for versions less than 1.12.15-2

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

AZL-57147 CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-20

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, step-issuer, dagdotdev, vault-secrets-operator, spiffe-helper-fips, timestamp-authority, tkn, prometheus-podman-exporter, temporal-ui-server-fips, gomplate-fips, pulumi, caddy-fips, dex, keda, terragrunt, consul, kube-rbac-proxy-fips, grafana-alloy...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, step-issuer, dagdotdev, vault-secrets-operator, spiffe-helper-fips, timestamp-authority, tkn, prometheus-podman-exporter, temporal-ui-server-fips, gomplate-fips, pulumi, caddy-fips, dex, keda, terragrunt, consul, kube-rbac-proxy-fips, grafana-alloy...

Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: CVE-2025-24032: default value for certpolicy none allows for authentication bypass bsc1237062. CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash bsc1237058. Patch...

Azure Linux 3.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...

CVE-2024-42122

creationtimestamp| type| source ---|---|--- 2025-02-21 14:18:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4897 2025-02-21 22:10:23+00:00| seen| Telegram/lwR7Ln1781wnJtFqMAL7i8w-7UkY1A2sGOpkTNEDIuFFGI9 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-49923

creationtimestamp| type| source ---|---|--- 2025-02-21 14:18:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4894 2025-02-21 22:10:23+00:00| seen| Telegram/3gmuMXPXFZ5Jh9cpEJGTNNZw6uHbyyIIqmxkgdxKQaFGKUd 2025-12-03 14:14:49+00:00| seen|...

Important: Red Hat Security Advisory: RHUI 4.11 security, bugfix, and enhancement update

An updated version of Red Hat Update Infrastructure RHUI is now available. RHUI 4.11 updates Pulp to a newer upstream version, fixes several issues, and adds an enhancement. Red Hat Update Infrastructure RHUI provides a highly scalable and redundant framework for managing repositories and content...

DEBIAN-CVE-2025-24032

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if certpolicy is set to none the default value, then pampkcs11 will only check if the user is capable of logging into the token. An attacker may create a different token with the user...