EUVD-2025-55317

Malicious code in common-turquoise-bat npm...

EUVD-2025-55319

Malicious code in common-red-sparrow npm...

EUVD-2025-55320

Malicious code in common-plum-barracuda npm...

SUSE CVE-2025-64432

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...

EUVD-2025-60266

Malicious code in commonkangarooz3n npm...

EUVD-2025-60268

Malicious code in commonchickadeez3n npm...

CVE-2025-60709: Out-of-bounds Read

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

DEBIAN-CVE-2025-12725

Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2025-12434

Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-64431

creationtimestamp| type| source ---|---|--- 2025-11-07 21:15:54+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52yrhsvnsu2 2025-11-07 22:20:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m534esgqtm2n...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

AZL-69793 CVE-2025-64432 affecting package kubevirt for versions less than 1.5.3-2

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...

CLSA-2025-1762537354 cups: Fix of CVE-2024-35235

CVE-2024-35235: patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item...

Kubevirt Trust Management Vulnerabilities

Kubevirt is an open source virtual machine manager from KubeVirt. A trust management issue vulnerability exists in Kubevirt versions 1.5.3 and earlier and 1.6.0, which stems from the virt-api component failing to properly validate the CN field in a client's TLS certificate, which could lead to...

CVE-2025-27917

creationtimestamp| type| source ---|---|--- 2025-11-06 17:28:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115503931619214286...

xorg-x11-server-Xwayland update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Please update...

PT-2025-48394

Name of the Vulnerable Software and Affected Versions Scada-LTS versions prior to 2.7.8.1 Description A path traversal issue exists in Scada-LTS. The Common.getHomeDir function within the br/org/scadabr/vo/exporter/ZIPProjectManager.java file of the Project Import component is affected. This...

aedttest (0.0.2), aimmo (>=2.5.13, <=2.7.0) +15 more potentially affected by CVE-2025-64458 via django (3.2.18)

django PYPI version 3.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aedttest 0.0.2 - aimmo =2.5.13, =6.2.2, =6.29.3, =6.29.3, =0.1.1, =0.1.0, =1.1.0, =0.10.0, =0.104.3rc1, =0.9.0rc1, =4.5.0, =5.9.3, =0.7.0rc1, =0.7....

aimmo (>=0.69.9b442, <=0.69.10b450), cfl-common (>=4.30.9, <=4.30.10) +2 more potentially affected by CVE-2025-64459 via django (2.2.22)

django PYPI version 2.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.69.9b442, =4.30.9, =4.30.9, =4.30.10 - rapid-router 2.7.6 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

terra-bonobo-nodes (>=0.1.1, <=0.1.4), terra-common (0.2.10) potentially affected by CVE-2025-64458 via django (2.1.12)

django PYPI version 2.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - terra-bonobo-nodes =0.1.1, =0.1.4 - terra-common 0.2.10 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...