CVE-2025-0678

creationtimestamp| type| source ---|---|--- 2025-03-03 19:44:05+00:00| seen| https://t.me/cvedetector/19377 2025-03-04 16:31:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6387 2025-03-25 05:23:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8591 2025-04-01 09:33:28+00:00| seen|...

CBL Mariner 2.0 Security Update: cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb (CVE-2025-27144)

The version of cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27144 advisory. - Go JOSE provides an...

CVE-2021-3735

creationtimestamp| type| source ---|---|--- 2025-02-28 13:27:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5894 2025-03-02 11:44:22+00:00| seen| Telegram/2epzO30aBKTi3sLQZWIdnV1-g-7Xzk89A0Ir1f-KRz8NXyNE 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-031...

CVE-2022-49136

creationtimestamp| type| source ---|---|--- 2025-02-27 18:27:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5749 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-52559

creationtimestamp| type| source ---|---|--- 2025-02-27 13:27:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5670 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-21792

creationtimestamp| type| source ---|---|--- 2025-02-27 06:11:20+00:00| seen| https://t.me/cvedetector/18998 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2021-46877

creationtimestamp| type| source ---|---|--- 2025-02-26 19:24:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5588 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

AZL-57437 CVE-2025-22869 affecting package cert-manager for versions less than 1.11.2-20

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57407 CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57312 CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CVE-2021-47658

creationtimestamp| type| source ---|---|--- 2025-02-26 02:23:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5424 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-49296

creationtimestamp| type| source ---|---|--- 2025-02-26 02:23:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5421 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: wire-go, capslock, kubernetes-event-exporter, rancher-loglevel, swagger, kserve-rest-proxy, http-echo, runc, kubernetes-release, openbao-k8s, aws-flb-firehose, direnv, paranoia, vendir, spiffe-helper, whereabouts, undock, nri-f5, redka, boring-registry, helm-operator...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, docker-credential-acr-env, prometheus-adapter-fips, secrets-store-csi-driver-provider-gcp, kubernetes-csi-external-provisioner, volume-modifier-for-k8s-fips, petname, esbuild, tflint, metrics-server-fips, task, metrics-server, hey,...

AZL-57126 CVE-2025-27144 affecting package cert-manager for versions less than 1.12.15-2

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

AZL-57147 CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-20

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: frp, trufflehog-fips, dagdotdev, packer, bank-vaults, kyverno-notation-aws-fips, tflint, kiali-fips, openbao-fips, istio-fips, dgraph, boring-registry, kargo, podman, distribution-fips, falcoctl-fips, skopeo-fips, containerd-fips, opentelemetry-collector-contrib-fips...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: frp, trufflehog-fips, dagdotdev, packer, bank-vaults, kyverno-notation-aws-fips, tflint, kiali-fips, openbao-fips, istio-fips, dgraph, boring-registry, kargo, podman, distribution-fips, falcoctl-fips, skopeo-fips, containerd-fips, opentelemetry-collector-contrib-fips...

Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: CVE-2025-24032: default value for certpolicy none allows for authentication bypass bsc1237062. CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash bsc1237058. Patch...

Azure Linux 3.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...