Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Azure Linux 3.0 Security Update: cert-manager (CVE-2023-6337)

The version of cert-manager installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6337 advisory. - HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through...

MiracleLinux 8 : unbound-1.16.2-5.el8_9.6 (AXSA:2024-7684:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7684:04 advisory. A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime...

MiracleLinux 9 : jss-5.3.0-1.el9, ldapjdk-5.3.0-1.el9, pki-core-11.3.0-1.el9, tomcatjss-8.3.0-1.el9 (AXSA:2023-5762:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5762:01 advisory. pki-core: When using the caServerKeygenDirUserCert profile, user can get certificates for other UIDs by entering name in Subject field CVE-2022-2393 Tenable...

MiracleLinux 4 : mutt-1.5.20-2.20091214hg736b6a.AXS4.1 (AXSA:2011-711:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-711:01 advisory. Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features...

Fedora 42 : NetworkManager-l2tp (2026-0d1cf2e45b)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0d1cf2e45b advisory. Updated to 1.52.0 release CVE-2025-9615 Verify file permissions for private connections to prevent unprivileged user from using other user's certs. Ensure...

CVE-2025-39871

creationtimestamp| type| source ---|---|--- 2026-01-11 18:02:25+00:00| published-proof-of-concept| Telegram/cYcF66s7AXTUxutuwDW2cBmFYfRe21kzM9XLn8Tc34XCPns 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2023-43206

D-LINK DWL-6610 FWv4.3.0.8B003C was discovered to contain a command injection vulnerability in the function webcertdownloadhandler. This vulnerability allows attackers to execute arbitrary commands via the certDownload parameter...

Siemens Ruggedcom ROX Race Condition (CVE-2024-0397)

A defect was discovered in the Python ssl module where there is a memory race condition with the ssl.SSLContext methods certstorestats and getcacerts. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the...

CVE-2025-38563

creationtimestamp| type| source ---|---|--- 2026-01-08 22:13:17+00:00| published-proof-of-concept| Telegram/EmV5qM2rczBRL4srCtTYo4Qe4hr9TGrLsA4GyGEHonbwa6c 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/...

Security Bulletin: Uncontrolled Resource Allocation in Bouncy Castle Java PKIXCertPathReviewer Leading to Excessive Allocation, which affects IBM watsonx.data

Summary Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows...

CVE-2025-38502

creationtimestamp| type| source ---|---|--- 2026-01-07 17:07:30+00:00| published-proof-of-concept| Telegram/0kJanDSEprBDcoadPdI2GM5tCx1ZeQ142rXTCiGKimcbKNU 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-38485

creationtimestamp| type| source ---|---|--- 2026-01-07 17:06:51+00:00| published-proof-of-concept| Telegram/4Nrc5zp20nWYPncpPH3MCSOxiRhJzp5emMlHV4gTJBiWqI 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, step-issuer, cert-manager-cmctl, aws-privateca-issuer, cert-manager-istio-csr, cert-exporter...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, step-issuer, cert-manager-cmctl, aws-privateca-issuer, cert-manager-istio-csr, cert-exporter...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, cert-manager-cmctl, cert-exporter-fips, cert-manager-webhook-pdns-fips, cert-exporter, cert-manager-istio-csr, cert-manager-cmctl-fips, aws-privateca-issuer-fips, aws-privateca-issuer, step-issuer, cert-manager-webhook-pdns...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: step-issuer-fips, cert-manager-cmctl, cert-exporter-fips, cert-manager-webhook-pdns-fips, cert-exporter, cert-manager-istio-csr, cert-manager-cmctl-fips, aws-privateca-issuer-fips, aws-privateca-issuer, step-issuer, cert-manager-webhook-pdns...