PT-2025-49499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Encryption algorithms in the virt/coco/sev-guest component read and write directly to shared unencrypted memory. This behavior can lead to information leakage and allow the host to...

SonarSource SonarQube Security Vulnerabilities

SonarSource SonarQube is an open source code quality management system from SonarSource, Switzerland. A security vulnerability exists in SonarSource SonarQube versions 10.4 and prior to 9.9.4, which stems from the fact that encrypted values generated using the Set Encryption feature may be...

CVE-2020-25688

A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository. This would result in all installations using the same certificates. If an attacker could observe network traffic internal t...

CVE-2019-14887

A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption...