org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr4), org.wildfly.core:wildfly-embedded (1.0.0.cr4) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.cr4)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr4 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr5), org.wildfly.core:wildfly-embedded (1.0.0.cr5) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.cr5)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr5 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha3), org.wildfly.core:wildfly-embedded (2.0.0.alpha3) +28 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.alpha3)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha3 - org.wildfly.core:wildfly-embedd...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha4), org.wildfly.core:wildfly-embedded (2.0.0.alpha4) +28 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.alpha4)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha4 - org.wildfly.core:wildfly-embedd...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha6), org.wildfly.core:wildfly-embedded (2.0.0.alpha6) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.alpha6)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha6 - org.wildfly.core:wildfly-embedd...

org.keycloak:keycloak-saml-wildfly-subsystem (>=1.7.0.cr1, <=1.7.0.final), org.keycloak:keycloak-wildfly-server-subsystem (>=1.7.0.cr1, <=1.7.0.final) +32 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.2.final)

org.wildfly.core:wildfly-server MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.keycloak:keycloak-saml-wildfly-subsystem =1.7.0.cr1, =1.7.0.cr1, =1.7.0.cr1, =3.2.0,...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr7), org.wildfly.core:wildfly-embedded (1.0.0.cr7) +6 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.cr7)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr7 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-core-dist (3.0.0.alpha15), org.wildfly.core:wildfly-core-feature-pack (3.0.0.alpha15) +17 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (3.0.0.alpha15)

org.wildfly.core:wildfly-server MAVEN version 3.0.0.alpha15 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.alpha15 -...

Sensitive Information Exposure

Infinispan is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper logging due to the exposure of sensitive information, such as configuration details or credentials, through logging mechanisms when using JGroups with JDBCPING...

CVE-2025-24718

creationtimestamp| type| source ---|---|--- 2025-01-31 09:17:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo37xk2v2r 2025-01-31 10:15:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3630 2025-01-31 11:11:33+00:00| seen| https://t.me/cvedetector/16910...

CVE-2025-0662 Uninitialized kernel memory disclosure via ktrace(2)

In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14 uninitialized bytes of...

GHSA-HCR5-WV4P-H2G2 kube-audit-rest's example logging configuration could disclose secret values in the audit log

Impact What kind of vulnerability is it? Who is impacted? If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. Patches Has the problem been patched? What versions should use...

kube-audit-rest's example logging configuration could disclose secret values in the audit log

Impact What kind of vulnerability is it? Who is impacted? If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. Patches Has the problem been patched? What versions should use...

CVE-2025-24884 kube-audit-rest's example logging configuration could disclose secret values in the audit log

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16...

MAL-2025-618 Malicious code in requests-async (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

SUSE CVE-2024-45339

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

kube-audit-rest's example logging configuration could disclose secret values in the audit log

If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages...

CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

Red Hat Infinispan 日志信息泄露漏洞

Red Hat Infinispan is a distributed caching and key-value NoSQL data store software from Red Hat, Inc. A log information disclosure vulnerability exists in Red Hat Infinispan that stems from the use of JDBCPING, where sensitive information may be exposed through the logging mechanism, leading to...

CVE-2025-0736: Insertion of Sensitive Information into Log File

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...