GO-2025-3586 Rancher: Restricted Administrator can change Administrator's passwords in github.com/rancher/rancher

Rancher: Restricted Administrator can change Administrator's passwords in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

GO-2025-3582 Ollama Denial of Service (DoS) via Null Pointer Dereference in github.com/ollama/ollama

Ollama Denial of Service DoS via Null Pointer Dereference in github.com/ollama/ollama...

GO-2025-3559 Ollama Divide By Zero vulnerability in github.com/ollama/ollama

Ollama Divide By Zero vulnerability in github.com/ollama/ollama...

GO-2025-3558 Ollama Allows Out-of-Bounds Read in github.com/ollama/ollama

Ollama Allows Out-of-Bounds Read in github.com/ollama/ollama...

GO-2025-3539 OpenShift Console Has a Path Traversal Vulnerability in github.com/openshift/console

OpenShift Console Has a Path Traversal Vulnerability in github.com/openshift/console...

GO-2025-3546 PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd

PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd...

GO-2025-3562 Kyverno ignores subjectRegExp and IssuerRegExp in github.com/kyverno/kyverno

Kyverno ignores subjectRegExp and IssuerRegExp in github.com/kyverno/kyverno...

CVE-2025-2710

creationtimestamp| type| source ---|---|--- 2025-03-25 01:05:44+00:00| seen| https://t.me/cvedetector/21009 2025-07-16 13:27:11+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2710.yaml 2025-07-17 21:02:31+00:00| seen|...

CVE-2025-2712

creationtimestamp| type| source ---|---|--- 2025-03-24 22:23:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8566 2025-03-25 01:05:35+00:00| seen| https://t.me/cvedetector/21001 2025-07-16 13:25:39+00:00| confirmed|...

GO-2025-3527 buildx allows a possible credential leakage to telemetry endpoint in github.com/docker/buildx

buildx allows a possible credential leakage to telemetry endpoint in github.com/docker/buildx...

GO-2025-3516 Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/

Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/...

GO-2025-3509 Vela Server Has Insufficient Webhook Payload Data Verification in github.com/go-vela/server

Vela Server Has Insufficient Webhook Payload Data Verification in github.com/go-vela/server...

CVE-2024-13853

creationtimestamp| type| source ---|---|--- 2025-03-11 09:15:54+00:00| seen| https://t.me/cvedetector/20045 2025-03-11 13:39:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7138 2025-03-12 06:44:39+00:00| confirmed|...

GO-2025-3500 In-memory stored Cross-site scripting (XSS) vulnerability in pineconesim in github.com/matrix-org/pinecone

In-memory stored Cross-site scripting XSS vulnerability in pineconesim in github.com/matrix-org/pinecone...

GO-2025-3498 Goroutine Leak in Abacus SSE Implementation in github.com/jasonlovesdoggo/abacus

Goroutine Leak in Abacus SSE Implementation in github.com/jasonlovesdoggo/abacus...

GO-2025-3507 Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux

Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux...

Linux Distros Unpatched Vulnerability : CVE-2022-3520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3520 Note that Nessus relies on the presence of the package as reported by t...

Linux Distros Unpatched Vulnerability : CVE-2022-1725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. CVE-2022-1725 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2022-3324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. CVE-2022-3324 Note that Nessus relies on the presence of the package as reported by...

Linux Distros Unpatched Vulnerability : CVE-2023-2839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2. CVE-2023-2839 Note that Nessus relies on the presence of the package as reported by the vendor...