F5 BIG-IP和F5 BIG-IQ 安全漏洞

F5 BIG-IP and F5 BIG-IQ are both products from the American company F5. F5 BIG-IP is an application delivery platform that integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IQ is a software-based cloud management solution. This...

PT-2026-40669

Name of the Vulnerable Software and Affected Versions BIG-IP versions prior to 17.1.3.2 BIG-IP versions prior to 17.5.1.6 BIG-IP versions prior to 21.0.0.2 BIG-IQ versions prior to 17.1.3.2 BIG-IQ versions prior to 17.5.1.6 BIG-IQ versions prior to 21.0.0.2 Description A highly privileged,...

F5 BIG-IP和F5 BIG-IQ 安全漏洞

F5 BIG-IP and F5 BIG-IQ are both products from the American company F5. F5 BIG-IP is an application delivery platform that integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IQ is a software-based cloud management solution. This...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, juicefs, opentofu, telegraf, rancher, rancher-agent, kyverno-notation-aws, trufflehog, ratify, cert-manager-istio-csr, zot, spqr, dex, percona-server-mongodb-operator, bento, terraform, cert-manager-cmctl, grafana, rancher-webhook,...

CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6

CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...

Security Bulletin: IBM i is affected by Cross-Site Request Forgery and Cross-Site Scripting in Digital Certificate Manager and Navigator for i [CVE-2025-66035, CVE-2025-66412, CVE-2026-22610]

Summary IBM i Digital Certificate Manager DCM and Navigator for i are vulnerable to Cross-Site Request Forgery XSRF token leakage via protocol-relative URLs in angular HTTP clients CVE-2025-66035 and Cross-Site Scripting XSS via the compiler's internal security schema being incomplete...

AZL-76827 CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

cert-manager 代码问题漏洞

cert-manager is an open-source certificate manager developed by cert-manager. It converts certificates and certificate authorities into resource types within a Kubernetes cluster, simplifying the process of obtaining, renewing, and using these certificates. There were code vulnerabilities in...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-exporter, cert-manager-istio-csr, step-issuer, cert-manager-webhook-pdns, aws-privateca-issuer, cert-manager-cmctl...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-exporter, cert-exporter-fips, cert-manager-cmctl, cert-manager-cmctl-fips, aws-privateca-issuer, cert-manager-istio-csr, step-issuer, cert-manager-webhook-pdns, step-issuer-fips, cert-manager-webhook-pdns-fips, aws-privateca-issuer-fips...

Moderate: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.2

cert-manager Operator for Red Hat OpenShift 1.15.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file, sbom-scorecard...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

EUVD-2015-0534

Malware in sbrugna...

EUVD-2017-16767

Malware in sbrugna...

EUVD-2018-3095

Malware in sbrugna...

EUVD-2015-0536

Malware in sbrugna...

EUVD-2015-0535

Malware in sbrugna...

EUVD-2025-23989

Malicious code in bioql PyPI...

CVE-2025-36119

IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i DCM due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit this vulnerability to perform actions i...