Lucene search
+L

26411 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2026/04/30 12:13 p.m.18 views

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite uses urllib3-2.3.0-py3-none-any.whl, cryptography-46.0.3-cp311-abi3-manylinux234x8664.whl, pillow-12.1.0-cp311-cp311-manylinux227x8664.manylinux228x8664.whl, lodash-4.17.21.tgz and axios-1.12.2.tgz which are vulnerable to CVE-2025-50181, CVE-2025-50182,...

8.9CVSS7.2AI score0.02965EPSS
SaveExploits2Affected Software1
RedHat Linux
RedHat Linux
added 2026/04/30 3:35 a.m.19 views

Important: Red Hat Security Advisory: gvisor-tap-vsock security update

An update for gvisor-tap-vsock is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

10CVSS7.2AI score0.02175EPSS
SaveExploits3References5
RedHat Linux
RedHat Linux
added 2026/04/30 3:03 a.m.44 views

Important: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

10CVSS7.2AI score0.02175EPSS
SaveExploits4References6
OSV
OSV
added 2026/04/30 1:02 a.m.18 views

CLEANSTART-2026-NJ24264 In libexpat before 2

Multiple security vulnerabilities affect the apache-zookeeper package. In libexpat before 2. See references for individual vulnerability details...

9.8CVSS6.8AI score0.01149EPSS
SaveExploits1References12
OSV
OSV
added 2026/04/30 1:01 a.m.27 views

CLEANSTART-2026-HV96032 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

9.8CVSS6.3AI score0.0087EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/30 1:01 a.m.24 views

CLEANSTART-2026-DN20646 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

9.8CVSS7AI score0.00778EPSS
SaveExploits1References14
OSV
OSV
added 2026/04/30 1:01 a.m.18 views

CLEANSTART-2026-TY63648 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...

9.8CVSS7.3AI score0.00397EPSS
SaveExploits0References7
OSV
OSV
added 2026/04/30 1:01 a.m.16 views

CLEANSTART-2026-WH33500 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00397EPSS
SaveExploits0References7
OSV
OSV
added 2026/04/30 1:01 a.m.14 views

CLEANSTART-2026-WG17155 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00397EPSS
SaveExploits0References7
OSV
OSV
added 2026/04/30 1:01 a.m.15 views

CLEANSTART-2026-OL12277 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

9.8CVSS7.3AI score0.0087EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/30 1:00 a.m.14 views

CLEANSTART-2026-MD91760 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

9.8CVSS6.3AI score0.0087EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/30 1:00 a.m.26 views

CLEANSTART-2026-HQ88036 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the terragrunt-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

9.8CVSS6.9AI score0.01557EPSS
SaveExploits6References54
OSV
OSV
added 2026/04/30 1:00 a.m.28 views

CLEANSTART-2026-PY36202 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the terragrunt-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

9.8CVSS6.2AI score0.01557EPSS
SaveExploits6References55
OSV
OSV
added 2026/04/30 12:58 a.m.25 views

CLEANSTART-2026-WB89098 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the openbao-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

9.8CVSS6.9AI score0.01557EPSS
SaveExploits5References40
OSV
OSV
added 2026/04/30 12:53 a.m.21 views

CLEANSTART-2026-GY48351 Within HostnameError

Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS6.8AI score0.02175EPSS
SaveExploits8References78
OSV
OSV
added 2026/04/30 12:53 a.m.19 views

CLEANSTART-2026-CN84623 Within HostnameError

Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS6.5AI score0.02175EPSS
SaveExploits8References78
OSV
OSV
added 2026/04/30 12:50 a.m.17 views

CLEANSTART-2026-QW08095 Moby is an open source container framework

Multiple security vulnerabilities affect the pulumi package. Moby is an open source container framework. See references for individual vulnerability details...

9.8CVSS7.3AI score0.09113EPSS
SaveExploits2References8
OSV
OSV
added 2026/04/30 12:49 a.m.16 views

CLEANSTART-2026-MI12470 Within HostnameError

Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS8.4AI score0.01557EPSS
SaveExploits5References55
OSV
OSV
added 2026/04/30 12:49 a.m.21 views

CLEANSTART-2026-SR31778 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc

Multiple security vulnerabilities affect the apache-nifi package. Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. See references for individual vulnerability details...

9.8CVSS7.3AI score0.01125EPSS
SaveExploits4References23
OSV
OSV
added 2026/04/30 12:45 a.m.27 views

CLEANSTART-2026-SO13464 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the opentofu-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

9.8CVSS6.1AI score0.01557EPSS
SaveExploits6References64
Rows per page
Query Builder