CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

Malicious code in cert-orchestration-adapter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a46ccca932f3d69709f16aef0e3bc3498916b7e0b87a1d69a340ce1d65677dc4 The OpenSSF Package Analysis project identified 'cert-orchestration-adapter' @ 5.9.1 pypi as malicious. It is considered malicious because: - Th...

CVE-2024-2193

creationtimestamp| type| source ---|---|--- 2024-03-13 09:16:22+00:00| seen| https://t.me/ctinow/206483 2024-03-13 14:57:21+00:00| seen| https://t.me/itsecnews/4196 2024-03-14 11:19:45+00:00| published-proof-of-concept| https://t.me/truesecator/5520 2024-03-15 19:23:06+00:00| seen|...

CVE-2023-47534

creationtimestamp| type| source ---|---|--- 2024-03-12 16:26:38+00:00| seen| https://t.me/ctinow/205805 2024-03-12 16:32:06+00:00| seen| https://t.me/ctinow/205821 2024-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1246 2024-03-13 21:52:26+00:00| seen|...

Siemens SENTRON

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens RUGGEDCOM APE1808 with Fortigate NGFW Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

AZL-35837 CVE-2024-28180 affecting package cert-manager for versions less than 1.11.2-14

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if t...

AZL-35875 CVE-2024-28180 affecting package cert-manager for versions less than 1.12.12-1

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if t...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: rekor, falcoctl, sigstore-scaffolding, tekton-chains, caddy, minio, grpc-health-probe, flux-kustomize-controller, tkn, slsa-verifier, frp, kube-rbac-proxy, terragrunt, argo-workflows, k3s, guac, gomplate, kubernetes-dashboard, step-ca, zot, cosign, oauth2-proxy, zarf...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: kargo, caddy, oauth2-proxy, terragrunt, kube-oidc-proxy, dex, minio-fips, neuvector-fips, falcoctl, slsa-verifier, skaffold, vexctl, policy-controller-fips, bank-vaults, ko-fips, fulcio-fips, falcoctl-fips, temporal-ui-server-fips, sigstore-scaffolding-fips,...

CVE-2023-52590

creationtimestamp| type| source ---|---|--- 2024-03-06 23:57:01+00:00| seen| https://t.me/ctinow/201937 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-03...

CVE-2023-52586

creationtimestamp| type| source ---|---|--- 2024-03-06 23:46:41+00:00| seen| https://t.me/ctinow/201917 2025-02-14 17:39:47+00:00| seen| Telegram/rlbnNF-jij67DefhaWE2LbN5fl2EUUZ-rkEH-Fpnh2-vyvll 2025-02-14 21:08:31+00:00| published-proof-of-concept|...

CVE-2023-33875

creationtimestamp| type| source ---|---|--- 2024-03-06 13:11:39+00:00| seen| https://t.me/ctinow/201309 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-32651

creationtimestamp| type| source ---|---|--- 2024-03-06 12:41:26+00:00| seen| https://t.me/ctinow/201286 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-32644

creationtimestamp| type| source ---|---|--- 2024-03-06 12:41:24+00:00| seen| https://t.me/ctinow/201285 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-25951

creationtimestamp| type| source ---|---|--- 2024-03-06 10:11:38+00:00| seen| https://t.me/ctinow/201179 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

AZL-35556 CVE-2024-24786 affecting package cert-manager for versions less than 1.11.2-14

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: dagger, oauth2-proxy, pulumi-language-yaml, cass-operator-fips, crossplane, velero, dex, dynamic-localpv-provisioner-fips, amass, kustomize, kyverno-policy-reporter-kyverno-plugin, secrets-store-csi-driver-provider-gcp, terraform-provider-sendgrid-fips, cass-operator...

AZL-35635 CVE-2024-24786 affecting package cert-manager for versions less than 1.12.12-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2023-52508

creationtimestamp| type| source ---|---|--- 2024-03-04 20:31:14+00:00| seen| https://t.me/ctinow/199546 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...