19366 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989382)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989382 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during...
Use-After-Free
github.com/envoyproxy/envoy is vulnerable to a Use-After-Free. The vulnerability is due to improper handling of DNS cache operations in the Dynamic Forward Proxy implementation, where a completion callback can trigger new or remove existing DNS resolutions, which allows an attacker to cause...
PT-2025-47725
Уязвимость службы сканирования вредоносных программ Ai-Boilt платформы безопасности для веб-серверов Linux Imunify360 связана с непринятием мер по нейтрализации инструкций в динамически исполняемом коде. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: supercronic, timoni, policy-controller, crossplane, boring-registry, gcsfuse, nats, delve, conftest, fulcio, velero-plugin-for-aws, rancher-machine, tofu-controller, portieris, kafkaexporter, terraform-provider-sendgrid, cfssl, argo-rollouts, kustomize, wire-go,...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, opensearch-k8s-operator, boring-registry, gcsfuse, incert, nat...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: dagdotdev, timoni, docker-machine-driver-harvester, openbao-k8s, spire-controller-manager, policy-controller, terraform-provider-time, crossplane, sbom-convert, local-path-provisioner, mockery, dockerize, terraform-docs, opensearch-k8s-operator, boring-registry,...
CVE-2025-60749
DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchupwebhelper.exe...
Cross-site Scripting (XSS)
Overview com.liferay:com.liferay.dynamic.data.mapping.item.selector.web is a Liferay Dynamic Data Mapping Item Selector Web Affected versions of this package are vulnerable to Cross-site Scripting XSS via the select structure page when processing user input in the First Name, Middle Name, or Last...
