6380 matches found
Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
Summary In the default configuration, webhook.azuredevops.username and webhook.azuredevops.password not set, Argo CD’s /api/webhook endpoint crashes the entire argocd-server process when it receives an Azure DevOps Push event whose JSON array resource.refUpdates is empty. The slice index 0 is...
Improper Check or Handling of Exceptional Conditions
Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server process to crash by sending an Azure DevOps Push event with an empty resource.refUpdates array. Note: This is only...
PT-2025-40045
Summary In the default configuration, webhook.azuredevops.username and webhook.azuredevops.password not set, Argo CD’s /api/webhook endpoint crashes the entire argocd-server process when it receives an Azure DevOps Push event whose JSON array resource.refUpdates is empty. The slice index 0 is...
PT-2025-40057
Name of the Vulnerable Software and Affected Versions Argo CD versions 2.9.0-rc1 through 2.14.19 Argo CD versions 3.0.0-rc1 through 3.2.0-rc1 Argo CD version 3.1.6 Argo CD version 3.0.17 Description Argo CD, a declarative GitOps continuous delivery tool for Kubernetes, is susceptible to a...
Linux kernel driver Heap Buffer Overflow DoS
The vulnerability of the sendemptyFlush function in the Linux kernel driver is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
SUSE-SU-2025:03384-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49492: nvme-pci: fix a NULL pointer dereference in nvmeallocadmintags bsc1238954. - CVE-2022-50116: kernel: tty: ngsm: fix deadlock and link starvation i...
Linux Distros Unpatched Vulnerability : CVE-2025-39867
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftsetpipapo: fix null deref for empty set Blamed commit broke the check for a null scratch map: - if unlikely!m || !rawcpuptrm-scratch + if...
BELL-CVE-2025-39887
Bulletin has no description...
netfilter: nft_set_pipapo: fix null deref for empty set
...
RHEL 8 : kpatch-patch-4_18_0-553_16_1, kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, and kpatch-patch-4_18_0-553_72_1 (RHSA-2025:16582)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16582 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
U.S. Secret Service Seizes 300 SIM Servers, 100K Cards Threatening U.S. Officials Near UN
The U.S. Secret Service on Tuesday said it took down a network of electronic devices located across the New York tri-state area that were used to threaten U.S. government officials and posed an imminent threat to national security. "This protective intelligence investigation led to the discovery ...
DEBIAN-CVE-2025-39886
In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...
CVE-2025-39867
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-39867
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the strbufferpatterncb function. An attacker can cause a denial of service by providing jobfile with the configuration option without a value e.g. bufferpattern=. Remediation There is no fixed version for...
PT-2025-39124
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s netfilter module, specifically within the nft set pipapo function. A commit introduced a null dereference issue when handling empty sets, breaking the...
[SECURITY] [DLA 4307-1] jq security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4307-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 21, 2025 https://wiki.debian.org/LTS -...
i40e: Fix potential invalid access when MAC list is empty
...
Debian dla-4307 : jq - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4307 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4307-1 [email protected] https://www.debian.org/lts/security/...