GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, chisel, kubernetes-dashboard-web,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: exfat: Added a check for the cluster chain loop in dir functions. An infinite loop may occur if the following conditions occur due to file system corruption: 1 Condition for exfatcountdirEntries to loop infinitely: - The clust...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validating UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified to ensure that their sizes match the declared lengths, and that they fit within the allocated buffer sizes as well...

CVE-2025-34271

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted channel even when SSL/TLS is enabled in the product configuration. As a result, an attacker positioned on the network...

CVE-2025-54469

A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTERRPCPORT and CLUSTERLANPORT to generate a command to be executed via popen, without first sanitising their values. The entry process of the enforcer container is the monitor process. When the enforcer...

CVE-2025-34271

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted channel even when SSL/TLS is enabled in the product configuration. As a result, an attacker positioned on the network...

CVE-2025-34271

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted channel even when SSL/TLS is enabled in the product configuration. As a result, an attacker positioned on the network...

CVE-2025-34271 Nagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted channel even when SSL/TLS is enabled in the product configuration. As a result, an attacker positioned on the network...