5612 matches found
EUVD-2024-41262
Malicious code in bioql PyPI...
EUVD-2024-2916
Malicious code in bioql PyPI...
Ubuntu: Security Advisory (USN-7795-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7793-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7796-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-8556 vulnerabilities
Vulnerabilities for packages: atlantis, q, crossplane-provider-keycloak-fips, gptscript, crossplane-provider-aws-firehose, src-fingerprint, crossplane, packer-fips, tkn, aactl, kyverno-notation-aws, crossplane-provider-aws-route53, argo-rollouts-fips, opentofu, commercial-grafana, flux-fips, xeol...
CVE-2025-10954 vulnerabilities
Vulnerabilities for packages: hydra, hydra-fips, weaviate...
CVE-2025-59937 vulnerabilities
Vulnerabilities for packages: gitea, sftpgo, gitea-fips...
GHSA-FMJH-F678-CV3X vulnerabilities
Vulnerabilities for packages: hydra, hydra-fips, weaviate...
GHSA-WPWJ-69CM-Q9C5 vulnerabilities
Vulnerabilities for packages: gitea, sftpgo, gitea-fips...
Linux Distros Unpatched Vulnerability : CVE-2025-9232
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the...
CVE-2025-9231
Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private...
AZL-78576 CVE-2025-9230 affecting package openssl-fips-provider 3.1.2-2
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a...
AZL-68082 CVE-2025-9230 affecting package edk2 for versions less than 20240524git3e722403cd16-10
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a...
AZL-78588 CVE-2025-9232 affecting package openssl-fips-provider 3.1.2-2
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
PT-2025-39986
Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 3.5.4, 3.4.3, 3.3.5, 3.2.6, 3.0.18, 1.1.1zd, and 1.0.2zm. Description: OpenSSL contains vulnerabilities due to out-of-bounds read and write issues. Specifically, an out-of-bounds read and write can occur when...
Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7775-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7775-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...