CVE-2024-5921

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

Astra Linux – Vulnerability in Python 3.11

A defect was discovered in the Python “ssl” module, where there is a memory race condition involving the methods “certstorestats” and “getcacerts” of the ssl.SSLContext class. This race condition can occur when these methods are called simultaneously with the loading of certificates into the...

Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across Europe and Asia

Threat actors with ties to Russia have been linked to a cyber espionage campaign aimed at organizations in Central Asia, East Asia, and Europe. Recorded Future's Insikt Group, which has assigned the activity cluster the name TAG-110, said it overlaps with a threat group tracked by the Computer...

GO-2024-3282 Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager

Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager...

GHSA-R4PG-VG54-WXX4 cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs

Impact cert-manager packages which call the standard library pem.Decode function can take a long time to process specially crafted invalid PEM data. If an attacker is able to modify PEM data which cert-manager reads e.g. in a Secret resource, they may be able to use large amounts of CPU in the...

GHSA-R4PG-VG54-WXX4 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, step-issuer, cert-manager-istio-csr, cert-exporter...

cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs

Impact cert-manager packages which call the standard library pem.Decode function can take a long time to process specially crafted invalid PEM data. If an attacker is able to modify PEM data which cert-manager reads e.g. in a Secret resource, they may be able to use large amounts of CPU in the...

PT-2024-17578

Name of the Vulnerable Software and Affected Versions cert-manager versions 0.1.0 through 1.16.1 cert-manager versions 1.15.0 through 1.15.3 cert-manager versions 1.12.0 through 1.12.13 Description A flaw exists in the cert-manager package where the pem.Decode function can take an excessive amoun...

CVE-2024-53079

creationtimestamp| type| source ---|---|--- 2024-11-19 20:09:37+00:00| seen| https://t.me/cvedetector/11479 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-50211

creationtimestamp| type| source ---|---|--- 2024-11-08 07:59:35+00:00| seen| https://t.me/cvedetector/10163 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-50138

creationtimestamp| type| source ---|---|--- 2024-11-05 19:44:12+00:00| seen| https://t.me/cvedetector/9913 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

AZL-52183 CVE-2024-51744 affecting package cert-manager for versions less than 1.12.15-1

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52257 CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

CVE-2024-7883

creationtimestamp| type| source ---|---|--- 2024-10-31 19:26:57+00:00| seen| https://t.me/cvedetector/9513 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-10469 CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.

VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users...

CVE-2024-50056

creationtimestamp| type| source ---|---|--- 2024-10-21 22:43:18+00:00| seen| https://t.me/cvedetector/8565 2025-04-07 08:44:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10684 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-50057

creationtimestamp| type| source ---|---|--- 2024-10-21 22:43:16+00:00| seen| https://t.me/cvedetector/8561 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-50060

creationtimestamp| type| source ---|---|--- 2024-10-21 22:42:54+00:00| seen| https://t.me/cvedetector/8546 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-50014

creationtimestamp| type| source ---|---|--- 2024-10-21 21:52:43+00:00| seen| https://t.me/cvedetector/8537 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-49990

creationtimestamp| type| source ---|---|--- 2024-10-21 21:02:15+00:00| seen| https://t.me/cvedetector/8522 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...