CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: k3s, buildah, nvidia-container-toolkit, sriov-network-device-plugin, podman, kubernetes, falco-no-driver, node-feature-discovery, grafana-alloy...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: k3s, buildah, nvidia-container-toolkit, sriov-network-device-plugin, podman, kubernetes, falco-no-driver, node-feature-discovery, grafana-alloy...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: zarf, nvidia-container-toolkit, wolfictl, neuvector-scanner, kots, grype, k8s-device-plugin, podman, skopeo, osv-scanner, ctop, buildah, kubescape, kubernetes-csi-driver-nfs, trivy, trivy-operator, nerdctl, spegel, undock, containerd, skaffold, k3s, kubescape-operato...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: zarf, nvidia-container-toolkit, wolfictl, neuvector-scanner, kots, grype, k8s-device-plugin, podman, skopeo, osv-scanner, ctop, buildah, kubescape, kubernetes-csi-driver-nfs, trivy, trivy-operator, nerdctl, spegel, undock, containerd, skaffold, k3s, kubescape-operato...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, sriov-network-device-plugin-fips, virt-handler-fips, sriov-network-device-plugin, virt-launcher, grafana-alloy, rke2-runtime, azure-container-networking, ctop-fips, virt-handler, falco-no-driver, nvidia-container-toolkit, prometheus-podman-exporter,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy-operator, cni-plugins-fips, spegel-fips, skopeo, virt-launcher, azure-container-networking, zarf, checksec, google-osconfig-agent, nvidia-container-toolkit, ctop, wolfictl, node-feature-discovery, trivy, containerd, cluster-autoscaler,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, sriov-network-device-plugin-fips, virt-handler-fips, sriov-network-device-plugin, virt-launcher, grafana-alloy, rke2-runtime, azure-container-networking, ctop-fips, virt-handler, falco-no-driver, nvidia-container-toolkit, prometheus-podman-exporter,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: kubernetes-fips, sriov-network-device-plugin-fips, sriov-network-device-plugin, grafana-alloy, rke2-runtime, azure-container-networking, ctop-fips, falco-no-driver, nvidia-container-toolkit, prometheus-podman-exporter, eks-distro-fips, eks-distro, kubernetes,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, sriov-network-device-plugin-fips, sriov-network-device-plugin, grafana-alloy, rke2-runtime, azure-container-networking, ctop-fips, falco-no-driver, nvidia-container-toolkit, prometheus-podman-exporter, eks-distro-fips, eks-distro, kubernetes,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy-operator, cni-plugins-fips, spegel-fips, skopeo, virt-launcher, azure-container-networking, zarf, checksec, google-osconfig-agent, nvidia-container-toolkit, ctop, wolfictl, node-feature-discovery, trivy, containerd, cluster-autoscaler,...

EUVD-2025-38242

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-146 and below, the Manage Playlists feature is vulnerable to stored Cross-site Scripting XSS,specifically in the Playlist Name field. An authenticated low-privileged user can create a playlist with a malicious name containi...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...

CVE-2025-63639

The Sourcecodester FAQ Bot with AI Assistant v1.0 contains a Cross-Site Scripting (XSS) vulnerability within its chat feature. The root cause is the improper handling of user-supplied input , which allows an attacker to inject malicious HTML or JavaScript into chat messages. This code executes in...

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

ClipBucket V5 安全漏洞

ClipBucket V5 is a video hosting platform for MacWarrior individual developers. A security vulnerability exists in ClipBucket V5 5.5.2-146 and prior versions, which stems from the Manage Photos feature mishandling the Photo Title parameter, which could lead to a stored cross-site scripting attack...

CVE-2025-64176 ThinkDashboard: Arbitrary File Upload vulnerability in the Backup Import Feature

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, an attacker can upload any file they wish to the /data directory of the web application via the backup import feature. When importing a backup, an attacker can first choose a .zip...

EUVD-2025-38150

An issue was discovered in AnyDesk before 9.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing of an Identity user image within the Discovery feature, or when establishing a connection between any two clients...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...

[SECURITY] Fedora 42 Update: qt5-qtspeech-5.15.18-1.fc42

The module enables a Qt application to support accessibility features such as text-to-speech, which is useful for end-users who are visually challenged or cannot access the application for whatever reason. The most common use case where text-to-speech comes in handy is when the end-user is drivin...