6059 matches found
PT-2025-48529
Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtls x509 string to names takes a head argument that is documented as an output argument. The documentation does not suggest that the functi...
curl: Double-free vulnerability in libcurl with rustls via NoServerCertVerifier condition leads to application crash
Summary: There is a double-free in libcurl with rustls. The root cause is reported and it is fixed in https://github.com/curl/curl/pull/19425, while I did not try to evaluate the actual triggering at that time. No AI was used to find the issue or generate the report. Affected version It was...
HSEC-2024-0003 process: command injection via argument list on Windows
process: command injection via argument list on Windows The process library on Windows is vulnerable to a command injection vulnerability, via cmd.exe's interpretation of arguments. Programs that invoke batch files .bat, .cmd and pass arguments whose values are affected by program inputs may be...
Siemens COMOS
SUMMARY COMOS is affected by two vulnerabilities that could allow an attacker to execute arbitrary code or lead to data infiltration. Siemens has released a new version for COMOS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens...
Siemens LOGO! 8 BM Devices
SUMMARY LOGO! 8 BM incl. SIPLUS variants contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens is preparing fix versions and recommends specific countermeasures for...
PT-2025-54669
Уязвимость параметра max cert list сжатия сертификатов в TLS 1.3 библиотеки OpenSSL связана с неконтролируемым распределением памяти. Эксплуатация уязвимость может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...
CERTFR-2025-ACT-047
creationtimestamp| type| source ---|---|--- 2025-11-03 16:12:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m4qfxb3xoc2q 2025-11-03 16:12:17+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115486643525731176 2025-11-03 17:03:15+00:00| seen|...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: kind, kubernetes-csi-external-attacher, prometheus-alertmanager, certificate-transparency, octo-sts, pulumi-language-java, kubeflow, timoni, http-echo, wuzz, cert-exporter, dockerize, fulcio, kube-logging-operator, gosu, nfs-subdir-external-provisioner, gptscript,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl, s5cmd,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl,...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl,...
CVE-2025-58187 vulnerabilities
Vulnerabilities for packages: kind, kubernetes-csi-external-attacher, prometheus-alertmanager, certificate-transparency, octo-sts, pulumi-language-java, kubeflow, timoni, http-echo, wuzz, cert-exporter, dockerize, fulcio, kube-logging-operator, gosu, nfs-subdir-external-provisioner, gptscript,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl,...
CVE-2025-61725 vulnerabilities
Vulnerabilities for packages: kubescape-operator, kind, portieris, rekor, yunikorn-k8shim, promxy, container-object-storage-interface, kubernetes-csi-external-attacher, configmap-reload, go-bindata, kapp, docker-credential-acr-env, kube-metrics-adapter, wire-go, cert-manager-cmctl, s5cmd,...