CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, celeborn, druid, kayenta-fips, neo4j, opensearch, trino, apicurio-registry, spark, kserve-modelmesh, localstack, knative-kafka-broker, apache-hop, sonarqube, infinispan, spark-fips, apache-activemq-artemis, flyway, kayenta,...

GHSA-WP3J-XQ48-XPJW vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, prometheus-podman-exporter...

CLSA-2025-1757148562 Update of kernel

Rebased FIPS patches to 5.14.0-570.39.1...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, celeborn, solr, druid, neo4j, opensearch, zookeeper-fips, trino, apicurio-registry, spark, kserve-modelmesh, localstack, knative-kafka-broker, apache-hop, sonarqube, infinispan, spark-fips, apache-activemq-artemis, flyway,...

GHSA-CPQ7-6GPM-G9RC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce-fips, opensearch-dashboards-fips, gitlab-rails-ce...

GHSA-95M3-7Q98-8XR5 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce-fips, opensearch-dashboards-fips, gitlab-rails-ce...

CVE-2025-9287 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce-fips, opensearch-dashboards-fips, gitlab-rails-ce...

Linux Distros Unpatched Vulnerability : CVE-2022-45146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue ...

Ubuntu: Security Advisory (USN-7726-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-7775 Memory overflow vulnerability leading to Remote...

CVE-2025-58058 vulnerabilities

Vulnerabilities for packages: xeol-fips, tflint, gitleaks, k9s, terraform-fips, nuclei, envoy-gateway-fips, k8s-image-swapper, conftest-fips, gptscript, trivy-fips, regclient-fips, cloudbeat-fips, skopeo-fips, packer-fips, kubescape-operator-fips, envoy-gateway, grype-fips, k9s-fips, vcluster-fip...

CVE-2025-54988 vulnerabilities

Vulnerabilities for packages: elasticsearch, opensearch, elasticsearch-fips...

GHSA-P72G-PV48-7W9X vulnerabilities

Vulnerabilities for packages: elasticsearch, opensearch, elasticsearch-fips...

CVE-2025-9092 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-V6CF-MV9H-C8MC vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All API modules. This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the JCE Cipher.doFinal function in org/bouncycastle/jcajce/provider/BaseCipher when the same byte array is used for both input and output during native encrypt or decrypt operations. An attacker can cause data...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the JCE Cipher.doFinal function in org/bouncycastle/jcajce/provider/BaseCipher when the same byte array is used for both input and output during native encrypt or decrypt operations. An attacker can cause data...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the AESNativeCBC class due to the use of a private instance class, rather than a private static class. An attacker can cause heap exhaustion by triggering excessive memory allocati...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the AESNativeCBC class due to the use of a private instance class, rather than a private static class. An attacker can cause heap exhaustion by triggering excessive memory allocati...