BELL-CVE-2024-12705

Bulletin has no description...

BELL-CVE-2025-24528

Bulletin has no description...

DSA-5856-1 redis - security update

Bulletin has no description...

GHSA-JCRP-X7W3-FFMG vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-0851 vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-2VPQ-FH52-J3WV vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-R2X6-CJG7-8R43 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2025-0840

A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

GHSA-33G6-495W-V8J2 vulnerabilities

Vulnerabilities for packages: flyway, trino...

CVE-2025-24790 vulnerabilities

Vulnerabilities for packages: flyway, trino...

RuoYi vulnerable to Denial of Service by attackers with admin privileges

An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service DoS by duplicating the login name of the account...

CGA-45HG-V26H-M86C

Bulletin has no description...

RHSA-2025:0739 Red Hat Security Advisory: mariadb:10.5 security update

Bulletin has no description...

GO-2025-3426 CRI-O Path Traversal vulnerability in github.com/cri-o/cri-o

CRI-O Path Traversal vulnerability in github.com/cri-o/cri-o...

GO-2025-3422 imgproxy is vulnerable to SSRF against 0.0.0.0 in github.com/imgproxy/imgproxy

imgproxy is vulnerable to SSRF against 0.0.0.0 in github.com/imgproxy/imgproxy...

MAL-2025-594 Malicious code in gatsby-theme-tinker-tailor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5df1c0054184f09396ef18554ff586b8264bd0fd8bfb34db6eb37fb5bcf37fe4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0290 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive...

CVE-2024-0150

NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead to information disclosure, denial of service, or data tampering...

CVE-2024-45341 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, fq, hello-world-golang, kpt, nri-jmx, sbom-convert, oras, metacontroller, trino, docker-credential-ecr-login, ytt, prometheus-operator, flux-notification-controller, runc, podman, argo-rollouts, git-credential-oauth, influx, kapp,...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, fq, hello-world-golang, kpt, nri-jmx, sbom-convert, oras, metacontroller, trino, docker-credential-ecr-login, ytt, prometheus-operator, flux-notification-controller, runc, podman, argo-rollouts, git-credential-oauth, influx, kapp,...