CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: openbao-fips, syft, kubescape-server, kots, policy-controller-fips, percona-server-mongodb-operator-fips, gcsfuse, skopeo, kyverno-notation-aws-fips, podman, harbor, prometheus-mongodb-exporter-fips, agentbeat-fips, grafana, istio-fips, envconsul-fips, frankenphp-8.5...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: openbao-fips, syft, kubescape-server, kots, policy-controller-fips, percona-server-mongodb-operator-fips, gcsfuse, skopeo, kyverno-notation-aws-fips, podman, harbor, prometheus-mongodb-exporter-fips, agentbeat-fips, grafana, istio-fips, envconsul-fips, frankenphp-8.5...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, mariadb-operator-fips, percona-xtradb-cluster-operator-fips, opentelemetry-operator, percona-server-mongodb-operator-fips, cert-manager-istio-csr-fips, cert-manager-webhook-pdns-fips, cert-manager-csi-driver-fips, percona-server-mongodb-operator,...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-webhook-pdns, cert-exporter, cert-manager-cmctl, aws-privateca-issuer, cert-manager-istio-csr...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-webhook-pdns, cert-exporter, cert-manager-cmctl, aws-privateca-issuer, cert-manager-istio-csr...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, step-issuer-fips, cert-manager-cmctl, cert-manager-istio-csr, aws-privateca-issuer, cert-exporter, cert-exporter-fips, step-issuer, cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, step-issuer-fips, cert-manager-cmctl, cert-manager-istio-csr, aws-privateca-issuer, cert-exporter, cert-exporter-fips, step-issuer, cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips...

Malicious Package

Overview eb-csr is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

EUVD-2025-205786

Malicious code in eb-csr npm...

Malicious code in eb-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde17b1e5e6a9e071d031714e31335d93e040635afe32c1cb655b8892e8e2d3b The package eb-csr was found to contain malicious code. Source: ghsa-malware 633a3693267851fd0c8eeee4cfc971fd7009c5c128d6a9ac0392d6ded3a8614f Any...

MAL-2025-192967 Malicious code in eb-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde17b1e5e6a9e071d031714e31335d93e040635afe32c1cb655b8892e8e2d3b The package eb-csr was found to contain malicious code. Source: ghsa-malware 633a3693267851fd0c8eeee4cfc971fd7009c5c128d6a9ac0392d6ded3a8614f Any...

UBUNTU-CVE-2025-40222

In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrunreg is specified as a memory offset, while for other SCIF types it is a...

CVE-2025-40222 tty: serial: sh-sci: fix RSCI FIFO overrun handling

In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrunreg is specified as a memory offset, while for other SCIF types it is a...

EUVD-2025-201237

In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrunreg is specified as a memory offset, while for other SCIF types it is a...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: clk: imx: Fixed an out-of-bounds access in dispmixcsrclkdevdata When numparents is 4, clkregister causes an out-of-bounds access when accessing the parentnames member. Use ARRAYSIZE instead of hardcoding the number here. BUG:...

EUVD-2015-4133

Malware in sbrugna...

CVE-2025-56301

Summary (CVE-2025-56301) — The issue affects Chipsalliance Rocket-Chip, tied to the CSR logic in the commit f517abbf41abb65cea37421d3559f9739efd00a9. The root cause is a flawed interaction between exception handling and the MRET return mechanism, which can trigger faulty trap behavior when an exc...

Linux Distros Unpatched Vulnerability : CVE-2024-23444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing...

CVE-2022-26494

An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: harbor-registry, tfsec, terraform-provider-azapi, velero-plugin-for-csi, speedtest-go, nri-haproxy, ingress-nginx-controller, rclone, cortex, hcloud, undock, kubernetes-replicator, libnvidia-container, kpt, distribution, go-bindata, volume-modifier-for-k8s,...