Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.3 security update

Important: Red Hat OpenShift GitOps v1.19.3 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-9158 OpenShift Gitops Operator v1.19.2 has hardcoded pod-security labels which conflict OCP = 4.16 GITOPS-9587 multiple CVEs in ose-kube-rbac-pro...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: qdrant, linkerd2-proxy, wasmcloud, mise, linkerd-network-validator, linkerd2-cni-plugin, zizmor, komodo, cargo-audit, buck2, pixi, parseable, linkerd-extension-init, nushell, garage, lychee, zed, zellij, linkerd2, deno, ztunnel, rustup, py3-xet-core, rustls-ffi,...

EUVD-2021-16089

Malware in sbrugna...

EUVD-2023-0080

Malicious code in bioql PyPI...

Tenable Sensor Proxy < 1.2.0 Multiple Vulnerabilities (TNS-2025-08)

According to its self-reported version, the Tenable Sensor Proxy running on the remote host is less than 1.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2025-08 advisory. - Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. CVE-2019-162...

CVE-2025-25188 vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, ztunnel, linkerd2-proxy, ztunnel-fips...

CVE-2024-36117

creationtimestamp| type| source ---|---|--- 2025-01-22 17:00:51+00:00| seen| https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/ 2025-09-15 13:28:31+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16 03:45:00+00:00| seen|...

CVE-2024-47561 vulnerabilities

Vulnerabilities for packages: apache-nifi, druid, akhq, tez, wavefront-proxy, celeborn, trino, logstash, hadoop-client-modules...

Important: squid

Issue Overview: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no know...

CVE-2024-21634 vulnerabilities

Vulnerabilities for packages: wavefront-proxy...

Important: ecs-service-connect-agent

Issue Overview: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, a malicious client is able to construct credentials with permanent validity in some specific scenarios. This is caused by the some...

Amazon Linux 2022 : rubygem-puma (ALAS2022-2022-051)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-051 advisory. A flaw was found in rubygem-puma. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starv...

Joomla Live Chat (SQL/Proxy) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Joomla Live Chat SQL/Proxy Multiple Remote Vulnerabilities ============================================================ Joomla Live Chat http://www.joompolitan.com/livechat.html...

EUVD-2002-2346

Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to 1 the GetString function in proxy.c for the SOCKS5 module or 2 the HandleS4Connection function in proxy.c for the SOCKS4 modul...

winproxy.txt

Date: Thu, 2 Jul 1998 20:37:32 -0500 From: Ryan Nichols Subject: Windows95 Proxy DoS Vulnerabilites While playing with a proxy server the other day, I have accidently stumbled across two remote bugs in numerous proxy servers. Those affected are "WinGate and StarTech". Both companies have been...