CVE-2025-26153

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...

CVE-2025-26153: Improper Neutralization of Input During Web Page Generation

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...

CVE-2025-0495 vulnerabilities

Vulnerabilities for packages: kubescape, docker-compose...

GHSA-M4GQ-FM9H-8Q75 vulnerabilities

Vulnerabilities for packages: kubescape, docker-compose...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: envoy-gateway, k8sgpt, ctop, flux-helm-controller, cilium-cli, kaniko, melange, fuse-overlayfs-snapshotter, zot, skaffold, kargo, trivy, kubevela, zarf, neuvector-scanner, docker-compose, syft, opa-envoy, newrelic-infrastructure-agent, cert-manager-cmctl, buildkitd,...

CVE-2025-0495 vulnerabilities

Vulnerabilities for packages: docker-compose, docker-compose-fips, kubescape...

GHSA-M4GQ-FM9H-8Q75 vulnerabilities

Vulnerabilities for packages: docker-compose, docker-compose-fips, kubescape...

An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.

...

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

...

CVE-2024-10846 affecting package docker-compose for versions less than 2.27.0-4

CVE-2024-10846 affecting package docker-compose for versions less than 2.27.0-4. A patched version of the package is available...

CVE-2025-22869 affecting package docker-compose for versions less than 2.27.0-4

CVE-2025-22869 affecting package docker-compose for versions less than 2.27.0-4. A patched version of the package is available...

Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop

...

CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10

CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10. A patched version of the package is available...

PT-2025-11311

Name of the Vulnerable Software and Affected Versions OpenCV affected versions not specified Description The software contains a heap-buffer-overflow read issue. The crash state indicates the issue occurs within the cv::PngDecoder::compose frame function, triggered by...

CVE-2025-27615

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...

CVE-2025-27615 umatiGateway's UI publicly accessible in provided docker-compose file

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...

CVE-2025-27615 umatiGateway's UI publicly accessible in provided docker-compose file

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...

CVE-2025-27615: Exposure of Sensitive Information to an Unauthorized Actor

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...

AZL-57374 CVE-2025-22869 affecting package docker-compose for versions less than 2.27.0-4

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57434 CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...