GHSA-6VGQ-8QJQ-H578 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl-provider-fips, openssl...

Linux Distros Unpatched Vulnerability : CVE-2025-9092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules allows Excessive...

Denial Of Service (DoS)

org.bouncycastle, bc-fips is vulnerable to Denial Of Service DoS. The vulnerability is due to excessive allocation in the org.Bouncycastle.Crypto.Fips.NativeLoader module, which allows an attacker to exhaust system resources and cause a denial of service...

CVE-2025-9566 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, hadoop-fips, seata, spark-fips, thingsboard, apache-hop, selenium, strimzi-kafka-operator, spark, infinispan, elasticsearch, camunda-zeebe, trino, celeborn, zipkin, druid, tez, kserve-modelmesh, grpc-java-fips, docker-selenium, localstack,...

GHSA-WP3J-XQ48-XPJW vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips...

CLSA-2025-1757148562 Update of kernel

Rebased FIPS patches to 5.14.0-570.39.1...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, hadoop-fips, cassandra-reaper, seata, spark-fips, thingsboard, zookeeper, apache-hop, selenium, strimzi-kafka-operator, cassandra-fips, spark, elasticsearch, camunda-zeebe, infinispan, trino, celeborn, zookeeper-fips, zipkin, druid, tez,...

GHSA-CPQ7-6GPM-G9RC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce, opensearch-dashboards-fips, gitlab-rails-ce-fips...

GHSA-95M3-7Q98-8XR5 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce, opensearch-dashboards-fips, gitlab-rails-ce-fips...

CVE-2025-9287 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce, opensearch-dashboards-fips, gitlab-rails-ce-fips...

Linux Distros Unpatched Vulnerability : CVE-2022-45146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue ...

Ubuntu: Security Advisory (USN-7726-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-7775 Memory overflow vulnerability leading to Remote...

CVE-2025-58058 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform, trivy-operator-fips, chainctl, prometheus-podman-exporter, podman, skopeo-fips, tflint, mattermost, xeol-fips, vcluster, nsc-fips, vault, nuclei, gitness, trivy-fips, kubescape-operator, vcluster-fips, xeol, opentofu-fips,...

CVE-2025-54988 vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, opensearch, elasticsearch...

GHSA-P72G-PV48-7W9X vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, opensearch, elasticsearch...

CVE-2025-9092 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-V6CF-MV9H-C8MC vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All API modules. This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0...