PT-2025-8733 · Cisco · Cisco Apic

Name of the Vulnerable Software and Affected Versions: Cisco APIC affected versions not specified Description: A vulnerability in the implementation of internal system processes could allow an authenticated, local attacker to access sensitive information on an affected device. The attacker must...

PT-2025-8732 · Cisco · Cisco Apic

Name of the Vulnerable Software and Affected Versions: Cisco APIC affected versions not specified Description: A vulnerability in the CLI could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. The attacker must...

GHSA-JM46-725R-HH9V vulnerabilities

Vulnerabilities for packages: aws-cli-v2, python...

GHSA-797F-63WG-8CHV vulnerabilities

Vulnerabilities for packages: aws-cli-v2, python...

GHSA-JM46-725R-HH9V vulnerabilities

Vulnerabilities for packages: aws-cli-v2, python...

AZL-57201 CVE-2025-27144 affecting package dcos-cli for versions less than 1.2.0-20

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

AZL-57102 CVE-2025-27144 affecting package dcos-cli for versions less than 1.2.0-17

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

@accounter-toolkit/green-invoice-graphql (>=0.0.2-alpha-20220914223128-d706aab, <=0.2.0-alpha-20230313141007-4bdbab6), @accounter-toolkit/hashavshevet-mesh (>=0.0.2-alpha-20220915073207-1bb0680, <=0.0.4-alpha-20230313141007-4bdbab6) +10 more potentially affected by CVE-2025-27098 via @graphql-mesh/cli (>=0.78.0, <=0.82.21)

@graphql-mesh/cli NPM version =0.78.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =0.2.0-alpha.24, =5.1.0-canary.3, =6.0.0-canary.20, =6.0.0-canary.20, =6.0.0-canary.20, =2.2.6-alpha-20220906004558-09c8599, =0.1.147, =0.1.3,...

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

CVE-2023-45288 affecting package docker-cli for versions less than 25.0.7-1

CVE-2023-45288 affecting package docker-cli for versions less than 25.0.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package cf-cli for versions less than 8.7.3-6

CVE-2023-45288 affecting package cf-cli for versions less than 8.7.3-6. A patched version of the package is available...

homeassistant-cli (0.2.0) potentially affected by CVE-2025-25305 via homeassistant (0.83.3)

homeassistant PYPI version 0.83.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-cli 0.2.0 Source cves: CVE-2025-25305 Source advisory: OSV:GHSA-M3PM-RPGG-5WJ6...

GHSA-Q4XQ-445G-G6CH vulnerabilities

Vulnerabilities for packages: keycloak-config-cli...

CVE-2024-4028 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli...

MAL-2025-1465 Malicious code in ing-open-banking-cli-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e671918afbc4f855be4bae3831f2a5b173f03949b1c9de394cf545a13027863e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fortinet FortiManager Information Disclosure

The vulnerability of the command-line interface CLI of the Fortinet FortiManager device management software is related to the use of a hard-coded cryptographic key. Exploiting this vulnerability allows an attacker, operating remotely, to disclose confidential information...

@javamodules/indexer (>=1.0.4, <=1.0.5), @resultify/rh-cli (>=1.0.0, <=1.3.2) potentially affected by CVE-2025-25290 via @octokit/request (>=9.0.1, <=9.1.3)

@octokit/request NPM version =9.0.1, =1.0.4, =1.0.0, =1.3.2 Source cves: CVE-2025-25290 Source advisory: MEND:CVE-2025-25290...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

@javamodules/indexer (>=1.0.4, <=1.0.5), @resultify/rh-cli (>=1.0.0, <=1.3.2) potentially affected by CVE-2025-25290 via @octokit/request (>=9.0.1, <=9.1.3)

@octokit/request NPM version =9.0.1, =1.0.4, =1.0.0, =1.3.2 Source cves: CVE-2025-25290 Source advisory: GHSA-RMVR-2PP2-XJ38...

@javamodules/indexer (>=1.0.4, <=1.0.5), @resultify/rh-cli (>=1.0.0, <=1.3.2) potentially affected by CVE-2025-25290 via @octokit/request (>=9.0.1, <=9.1.3)

@octokit/request NPM version =9.0.1, =1.0.4, =1.0.0, =1.3.2 Source cves: CVE-2025-25290 Source advisory: OSV:GHSA-RMVR-2PP2-XJ38...