CVE-2024-26672

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-06-29 16:55:32+00:00| seen|...

CVE-2025-40005

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-05-05 20:00:00+00:00| seen|...

CERTFR-2025-ACT-052

creationtimestamp| type| source ---|---|--- 2025-12-01 13:24:26+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m6wjmyxrdx2w 2025-12-01 13:24:27+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115644528440908877 2025-12-01 13:39:09+00:00| seen|...

CERTFR-2025-ACT-050

creationtimestamp| type| source ---|---|--- 2025-11-24 14:16:42+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m6ezbyzdja27 2025-11-24 14:16:45+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115605097721082231 2025-11-24 15:31:12+00:00| seen|...

PT-2025-47916

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose versions prior to 7.2 Description A flaw exists in Cesanta Mongoose where a null pointer dereference in the add ca certs function can lead to a denial of service. This occurs during TLS initialization when SSL CTX get cert sto...

CVE-2025-65502

Null pointer dereference in addcacerts in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initialization where SSLCTXgetcertstore returns NULL...

curl: Double-free vulnerability in libcurl with rustls via NoServerCertVerifier condition leads to application crash

Summary: There is a double-free in libcurl with rustls. The root cause is reported and it is fixed in https://github.com/curl/curl/pull/19425, while I did not try to evaluate the actual triggering at that time. No AI was used to find the issue or generate the report. Affected version It was...

HSEC-2024-0003 process: command injection via argument list on Windows

process: command injection via argument list on Windows The process library on Windows is vulnerable to a command injection vulnerability, via cmd.exe's interpretation of arguments. Programs that invoke batch files .bat, .cmd and pass arguments whose values are affected by program inputs may be...

Siemens COMOS

SUMMARY COMOS is affected by two vulnerabilities that could allow an attacker to execute arbitrary code or lead to data infiltration. Siemens has released a new version for COMOS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens...

Siemens LOGO! 8 BM Devices

SUMMARY LOGO! 8 BM incl. SIPLUS variants contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens is preparing fix versions and recommends specific countermeasures for...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

CERTFR-2025-ACT-047

creationtimestamp| type| source ---|---|--- 2025-11-03 16:12:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m4qfxb3xoc2q 2025-11-03 16:12:17+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115486643525731176 2025-11-03 17:03:15+00:00| seen|...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: prometheus-operator, shfmt, aws-s3-controller, istio, cosign, rancher-telemetry, terraform, docker-credential-gcr, kube-metrics-adapter, timescaledb-parallel-copy, incert, helm-docs, fq, distribution, spiffe-helper, falcosidekick, ini-file, hydra, argo-rollouts,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: aws-s3-controller, conftest, cert-exporter, kubernetes-dashboard-web, pvc-autoresizer, terraform-provider-sendgrid, s5cmd, prometheus-pushgateway, vault-k8s, elvish, crossplane, stern, istio, runc, sbom-convert, newrelic-nri-statsd, pulumi-kubernetes-operator,...

CVE-2025-58187 vulnerabilities

Vulnerabilities for packages: prometheus-operator, shfmt, aws-s3-controller, istio, cosign, rancher-telemetry, terraform, docker-credential-gcr, kube-metrics-adapter, timescaledb-parallel-copy, incert, helm-docs, fq, distribution, spiffe-helper, falcosidekick, ini-file, hydra, argo-rollouts,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: shfmt, aws-s3-controller, conftest, cert-exporter, kubernetes-dashboard-web, pvc-autoresizer, terraform-provider-sendgrid, s5cmd, prometheus-pushgateway, vault-k8s, elvish, crossplane, stern, istio, runc, sbom-convert, newrelic-nri-statsd, pulumi-kubernetes-operator,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: shfmt, aws-s3-controller, conftest, cert-exporter, kubernetes-dashboard-web, pvc-autoresizer, terraform-provider-sendgrid, s5cmd, prometheus-pushgateway, vault-k8s, elvish, crossplane, stern, istio, runc, sbom-convert, newrelic-nri-statsd, pulumi-kubernetes-operator,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: shfmt, aws-s3-controller, conftest, cert-exporter, kubernetes-dashboard-web, pvc-autoresizer, terraform-provider-sendgrid, s5cmd, prometheus-pushgateway, vault-k8s, elvish, crossplane, stern, istio, runc, sbom-convert, newrelic-nri-statsd, pulumi-kubernetes-operator,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: shfmt, aws-s3-controller, conftest, cert-exporter, kubernetes-dashboard-web, pvc-autoresizer, terraform-provider-sendgrid, s5cmd, prometheus-pushgateway, vault-k8s, elvish, crossplane, stern, istio, runc, sbom-convert, newrelic-nri-statsd, pulumi-kubernetes-operator,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: shfmt, aws-s3-controller, conftest, cert-exporter, kubernetes-dashboard-web, pvc-autoresizer, terraform-provider-sendgrid, s5cmd, prometheus-pushgateway, vault-k8s, elvish, crossplane, stern, istio, runc, sbom-convert, newrelic-nri-statsd, pulumi-kubernetes-operator,...