PT-2025-32: Authentication bypass in NetScaler ADC

The discovered vulnerability in NetScaler ADC allows an attacker to bypass the authentication proceduce. The affected products: NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-43.56 NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-58.32 NetScaler ADC 13.1-FIPS and NDcPP BEFORE...

TencentOS Server 3: grafana-pcp (TSSA-2024:0789)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0789 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: go-toolset:rhel8 (TSSA-2024:0769)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0769 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2025-49146 vulnerabilities

Vulnerabilities for packages: keycloak, liquibase, camunda-zeebe, apicurio-registry, sonarqube-10...

GHSA-HQ9P-PM7W-8P54 vulnerabilities

Vulnerabilities for packages: keycloak, liquibase, camunda-zeebe, apicurio-registry, sonarqube-10...

CVE-2025-47950 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro, juicefs...

GHSA-F26W-GH5M-QQ77 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

CVE-2025-49140 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

Fedora 41 : krb5 (2025-42a13f896e)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-42a13f896e advisory. Disallowing use of the arcfour-hmac-md5 encryption type for session keys Add support for the PKINIT paChecksum2 sequence, required for Active Directory...

GHSA-8CJ5-5RVV-WF4V vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, jitsucom-jitsu, sqlpad, kibana, tileserver-gl-fips, gitlab-rails-ce, code-server, tileserver-gl...

Ubuntu: Security Advisory (USN-7554-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a man-in-the-middle vulnerability in RFC7250 Raw Public Keys [CVE-2024-12797]

Summary IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a man-in-the-middle vulnerability in RFC7250 Raw Public Keys RPKs, due to server authentication failure which is susceptible to man-in-the-middle attack CVE-2024-12797. RFC7250 Raw Public Keys are used in our Speech service...

krb5 security update

1.18.2-32.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.18.2-32 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default CVE-2025-3576 Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648...

CVE-2025-4123 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-Q53Q-GXQ9-MGRJ vulnerabilities

Vulnerabilities for packages: grafana-fips...

K000151542: OpenSSL vulnerability CVE-2025-4575

Security Advisory Description Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as truste...

CVE-2025-47290 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, docker-compose-fips, docker-compose, neuvector, neuvector-fips...

GHSA-CM76-QM8V-3J95 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, docker-compose-fips, docker-compose, neuvector, neuvector-fips...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: cg, wolfictl, k3s, zot, melange...

CVE-2021-35119

Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...