16829 matches found
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: MIPS: Do not crash when calling stacktop for tasks without an ABI or vDSO. Not all tasks have an ABI associated with them, or a vDSO mapped to them. For example, kthreads never have such an ABI. If such a task calls stacktop, it...
CVE-2025-60749
DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchupwebhelper.exe...
Cross-site Scripting (XSS)
Overview com.liferay:com.liferay.dynamic.data.mapping.item.selector.web is a Liferay Dynamic Data Mapping Item Selector Web Affected versions of this package are vulnerable to Cross-site Scripting XSS via the select structure page when processing user input in the First Name, Middle Name, or Last...
CVE-2025-60749
DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchupwebhelper.exe...
SUSE CVE-2025-11232
To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "^A-Za-z0-9.-"; "hostname-char-replacement" must be empty the default; and "ddns-qualifying-suffix" must NOT be empty the default is empty. DDNS...
PT-2025-44631
Name of the Vulnerable Software and Affected Versions Trimble SketchUp desktop version 2025 Description A DLL hijacking issue exists in Trimble SketchUp desktop 2025. This occurs due to a crafted libcef.dll file being used by sketchup webhelper.exe. An attacker could potentially leverage this to...
CVE-2025-60749
Trimble SketchUp Desktop 2025 is affected by a DLL hijacking flaw in sketchup_webhelper.exe via a crafted libcef.dll. Root cause: hijacked DLL loading in SketchUp, allowing code execution within the app context (per PT-2025-44631). Affected component/file: libcef.dll used by sketchup_webhelper.ex...
IPFire Cross-Site Scripting Vulnerability (CNVD-2025-27643)
IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that stems from insufficient cleanup and escaping of the SERVICE, LOGIN, and PASSWORD parameters, which could be exploited by...
Trimble SketchUp Desktop 安全漏洞
Trimble SketchUp Desktop is a 3D modeling software from Trimble USA. A security vulnerability exists in Trimble SketchUp Desktop 2025, which stems from sketchupwebhelper.exe's use of a specially crafted libcef.dll, which could lead to a DLL hijacking attack...
