CVE Breadcrumbs: Tracking Vulnerabilities through Versioned Apache Libraries

The Apache Software Foundation ASF ecosystem underpins a vast portion of modern software infrastructure, powering widely used components such as Log4j, Tomcat, and Struts. However, the ubiquity of these libraries has made them prime targets for high-impact security vulnerabilities, as illustrated...

vulnerability-research

vulnerability-...

CVE-2025-8890

creationtimestamp| type| source ---|---|--- 2025-11-27 15:28:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6moorbxdg2s 2025-11-28 01:04:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/115624631470875781 2025-11-28 01:04:26+00:00| seen|...

DEBIAN-CVE-2025-63938

Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the stripreturnport function within src/reqs.c...

SUSE-SU-2025:4229-1 Security update for buildah

This update for buildah fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

CVE-2025-54563

creationtimestamp| type| source ---|---|--- 2025-11-25 01:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6g7ib253v2k...

runc security update

4:1.3.0-4 - rename errors.go to errorslinux.go - Related: RHEL-122400 4:1.3.0-3 - Add relevant patches to CVEs - Resolves: RHEL-122400 4:1.3.0-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122400 - Resolves: RHEL-122403 - Resolves: RHEL-122414...

OpenSCAP Libraries 1.4.3

The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...

SUSE-SU-2025:4170-1 Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes one security issue The following security issue was fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmapipuadt bsc1245778...

CVE-2025-13136

creationtimestamp| type| source ---|---|--- 2025-11-22 09:19:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m67hqdgiui2k...

AZL-70660 CVE-2025-40210 affecting package kernel for versions less than 6.6.112-1

In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...

CVE-2025-64767

creationtimestamp| type| source ---|---|--- 2025-11-19 22:23:43+00:00| published-proof-of-concept| https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4 2025-11-21 19:52:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m662o4dcbv2q 2025-11-22 01:34:02+00:00|...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46724)

drm/amdgpu: vulnerability in drm/amdgpu that involved an out-of-bounds read of dfv17channelnumber. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

[SECURITY] [DSA 6059-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6059-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 16, 2025 https://www.debian.org/security/faq -...

DEBIAN-CVE-2025-13033

A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the emai...

BELL-CVE-2025-40181

Bulletin has no description...

BELL-CVE-2025-40133

Bulletin has no description...

SUSE CVE-2025-12765

pgAdmin = 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification...

SUSE CVE-2025-40144

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

OpenSCAP Libraries 1.3.13

The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...