100 matches found
CVE-2025-30204 affecting package cf-cli for versions less than 8.4.0-27
CVE-2025-30204 affecting package cf-cli for versions less than 8.4.0-27. A patched version of the package is available...
AZL-76880 CVE-2025-58190 affecting package cf-cli for versions less than 8.7.11-5
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76883 CVE-2025-47911 affecting package cf-cli for versions less than 8.7.11-5
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
CVE-2025-65637 affecting package cf-cli for versions less than 8.4.0-26
CVE-2025-65637 affecting package cf-cli for versions less than 8.4.0-26. A patched version of the package is available...
EUVD-2019-13427
Malware in sbrugna...
Azure Linux 3.0 Security Update: cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device-plugin (CVE-2025-22872)
The version of cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device- plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22872 advisory. - The...
CVE-2025-22872 affecting package cf-cli for versions less than 8.7.11-3
CVE-2025-22872 affecting package cf-cli for versions less than 8.7.11-3. A patched version of the package is available...
AZL-60545 CVE-2025-22872 affecting package cf-cli for versions less than 8.7.11-3
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
CVE-2024-51744 affecting package cf-cli for versions less than 8.4.0-24
CVE-2024-51744 affecting package cf-cli for versions less than 8.4.0-24. A patched version of the package is available...
CVE-2025-22869 affecting package cf-cli for versions less than 8.7.11-2
CVE-2025-22869 affecting package cf-cli for versions less than 8.7.11-2. A patched version of the package is available...
CVE-2023-48795 affecting package cf-cli for versions less than 8.7.11-1
CVE-2023-48795 affecting package cf-cli for versions less than 8.7.11-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-44487 affecting package cf-cli for versions less than 8.4.0-13
CVE-2023-44487 affecting package cf-cli for versions less than 8.4.0-13. A patched version of the package is available...
AZL-57347 CVE-2025-22869 affecting package cf-cli for versions less than 8.7.11-2
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...
CVE-2023-45288 affecting package cf-cli for versions less than 8.7.3-6
CVE-2023-45288 affecting package cf-cli for versions less than 8.7.3-6. A patched version of the package is available...
Azure Linux 3.0 Security Update: azcopy / blobfuse2 / cert-manager / cf-cli (CVE-2024-24786)
The version of azcopy / blobfuse2 / cert-manager / cf-cli installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24786 advisory. - The protojson.Unmarshal function can enter an infinite loop when...
Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt (CVE-2022-32149)
The version of application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the...
Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)
The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...
Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cert-manager / cf-cli / cni / cni-plugins (CVE-2024-45338)
The version of application-gateway-kubernetes-ingress / cert-manager / cf-cli / cni / cni-plugins installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45338 advisory. - An attacker can craft an input t...