CVE-2025-8556 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, terraform-provider-azurerm-fips, flux, grafana-alloy-fips, neuvector-sigstore-interface-fips, terraform, wal-g, crossplane-provider-aws-cloudfront, guac, kyverno-notation-aws, crossplane-provider-azure-managedidentity, kyverno-fips,...

CVE-2025-10954 vulnerabilities

Vulnerabilities for packages: hydra-fips, weaviate, hydra...

CVE-2025-59937 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea, sftpgo...

GHSA-FMJH-F678-CV3X vulnerabilities

Vulnerabilities for packages: hydra-fips, weaviate, hydra...

GHSA-WPWJ-69CM-Q9C5 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea, sftpgo...

Linux Distros Unpatched Vulnerability : CVE-2025-9232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the...

CVE-2025-9231

Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private...

AZL-78588 CVE-2025-9232 affecting package openssl-fips-provider 3.1.2-1

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

AZL-68082 CVE-2025-9230 affecting package edk2 for versions less than 20240524git3e722403cd16-10

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a...

AZL-78576 CVE-2025-9230 affecting package openssl-fips-provider 3.1.2-1

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a...

CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

PT-2025-39986

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 3.5.4, 3.4.3, 3.3.5, 3.2.6, 3.0.18, 1.1.1zd, and 1.0.2zm. Description: OpenSSL contains vulnerabilities due to out-of-bounds read and write issues. Specifically, an out-of-bounds read and write can occur when...

Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7775-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7775-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

GHSA-2HMJ-97JW-28JH vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, apache-pulsar, thingsboard, prometheus-jmx-exporter, solr, spark, strimzi-kafka-operator, spark-fips, trino...

CVE-2025-58457 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, apache-pulsar, thingsboard, prometheus-jmx-exporter, solr, spark, strimzi-kafka-operator, spark-fips, trino...

Ubuntu: Security Advisory (USN-7755-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : gnutls (ELSA-2025-20606)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20606 advisory. 3.8.3-6.2fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35925409 - Update FIPS module name for Oracle Linux...

CVE-2025-34192

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 macOS/Linux client deployments are built against OpenSSL 1.0.2h-fips released May 2016, which has been end-of-life since 2019 and is no longer supported by the OpenSSL...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, docker-credential-ecr-login, memcached-exporter-fips, knative-eventing, k8sgpt-operator, yace-fips, modelmesh-runtime-adapter, kserve-rest-proxy, kube-vip-cloud-provider, rancher-machine, nvidia-nsight-compute-12.8, azurefile-csi-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, docker-credential-ecr-login, memcached-exporter-fips, knative-eventing, k8sgpt-operator, yace-fips, modelmesh-runtime-adapter, kserve-rest-proxy, kube-vip-cloud-provider, rancher-machine, nvidia-nsight-compute-12.8, azurefile-csi-fips,...