GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, envconsul, vault-k8s, spark-operator, terraform-docs, dbmate, cadvisor, pulumi-kubernetes-operator, xcover, local-path-provisioner, step-kms-plugin, portieris, nfs-subdir-external-provisioner, podinfo, rootlesskit, sealed-secrets,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, envconsul, vault-k8s, spark-operator, terraform-docs, dbmate, cadvisor, pulumi-kubernetes-operator, xcover, local-path-provisioner, step-kms-plugin, portieris, nfs-subdir-external-provisioner, podinfo, rootlesskit, sealed-secrets,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, envconsul, vault-k8s, spark-operator, terraform-docs, dbmate, cadvisor, pulumi-kubernetes-operator, xcover, local-path-provisioner, step-kms-plugin, portieris, nfs-subdir-external-provisioner, podinfo, rootlesskit, sealed-secrets,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: conftest, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips, git-sync-fips, bazelisk, conftest-fips, external-dns, ip-masq-agent, pgwatch, spqr, kubevela-fips, kubecolor,...

Cisco IOS XE Software Simple Network Management Protocol DoS (cisco-sa-snmpwred-x3MJyf5M)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected...

Security Bulletin: Multiple vulnerabilities in IBM DataPower OS kernel resulting in Denial of Service

Summary The following kernel issues may result in an unexpected device reload. Vulnerability Details CVEID:CVE-2024-42292 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: kobjectuevent: Fix OOB access within zapmodaliasenv zapmodaliasenv wrongly calculates size of...

SUSE CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

UBUNTU-CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909 Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...