6059 matches found
SUSE-SU-2025:20199-1 Security update for pam_pkcs11
This update for pampkcs11 fixes the following issues: - CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN bsc1237058. - CVE-2025-24032: Fixed authentication bypass with default value for certpolicy none bsc1237062...
CVE-2022-3114
creationtimestamp| type| source ---|---|--- 2025-04-22 14:03:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12840 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2025-37860
creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12407 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
Security update for cosign
This update for cosign fixes the following issues: CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...
AZL-60528 CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
AZL-60472 CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
CVE-2025-23133
creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:37+00:00| seen| https://t.me/cvedetector/23115 2025-05-04 13:18:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14801 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2025-23132
creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:36+00:00| seen| https://t.me/cvedetector/23114 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...
CVE-2025-22022
creationtimestamp| type| source ---|---|--- 2025-04-16 13:31:28+00:00| seen| https://t.me/cvedetector/23075 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-01-11 18:01:52+00:00| seen|...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cert-manager
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cert-manager. Vulnerability Details CVEID:CVE-2024-36537 DESCRIPTION: cert-manager could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an insecure permissions flaw. By obtaining...
CVE-2025-32387 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, pluto, tw, kubescape, helm-docs, eksctl, rancher-helm, cilium-cli, chartmuseum, chart-testing, trivy, kots, zot, flux-source-controller, cluster-api-helm-controller, k9s, flux, k8ssandra-client, helm-push, flux-helm-controller, zarf, helm-operator...
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, pluto, tw, kubescape, helm-docs, eksctl, rancher-helm, cilium-cli, chartmuseum, chart-testing, trivy, kots, zot, flux-source-controller, cluster-api-helm-controller, k9s, flux, k8ssandra-client, helm-push, flux-helm-controller, zarf, helm-operator...
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, pluto, tw, kubescape, helm-docs, eksctl, rancher-helm, cilium-cli, chartmuseum, chart-testing, trivy, kots, zot, flux-source-controller, cluster-api-helm-controller, k9s, flux, k8ssandra-client, helm-push, flux-helm-controller, zarf, helm-operator...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, pluto, tw, kubescape, helm-docs, eksctl, rancher-helm, cilium-cli, chartmuseum, chart-testing, trivy, kots, zot, flux-source-controller, cluster-api-helm-controller, k9s, flux, k8ssandra-client, helm-push, flux-helm-controller, zarf, helm-operator...
CVE-2025-32387 vulnerabilities
Vulnerabilities for packages: flux, cluster-api-helm-controller-fips, rancher-helm, consul-k8s, cilium-cli, kuma, flux-helm-controller, helm-operator-fips, helm-push, kubescape, k8ssandra-client-fips, chart-testing, cluster-api-helm-controller, chartmuseum, kots, tw, k9s, flux-fips, helm-operator...
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: flux, cluster-api-helm-controller-fips, rancher-helm, consul-k8s, cilium-cli, kuma, flux-helm-controller, helm-operator-fips, helm-push, kubescape, k8ssandra-client-fips, chart-testing, cluster-api-helm-controller, chartmuseum, kots, tw, k9s, flux-fips, helm-operator...
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: flux, cluster-api-helm-controller-fips, rancher-helm, consul-k8s, cilium-cli, kuma, flux-helm-controller, helm-operator-fips, helm-push, kubescape, k8ssandra-client-fips, chart-testing, cluster-api-helm-controller, chartmuseum, kots, tw, k9s, flux-fips, helm-operator...
CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22
CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22. A patched version of the package is available...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: kwok, pluto, terraform-provider-azapi, ko, crossplane-provider-azure-storage, azure-service-operator, wuzz, goreleaser, crossplane-provider-keycloak, snyk-cli, metallb, undock, step, crane, nri-kafka, tekton-chains, croc, vexctl, multus-cni, openbao-k8s, flux,...
GHSA-G9PC-8G42-G6VQ vulnerabilities
Vulnerabilities for packages: kwok, pluto, terraform-provider-azapi, ko, crossplane-provider-azure-storage, azure-service-operator, wuzz, goreleaser, crossplane-provider-keycloak, snyk-cli, metallb, undock, step, crane, nri-kafka, tekton-chains, croc, vexctl, multus-cni, openbao-k8s, flux,...