CGA-4FJW-226J-J77H

Bulletin has no description...

CGA-QRQ5-XC8F-H74H

Bulletin has no description...

CGA-V2MF-56PW-3FX4

Bulletin has no description...

CGA-CR5H-V9HC-XV8R

Bulletin has no description...

DSA-5860-1 linux - security update

Bulletin has no description...

CVE-2024-6356

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, which allowed cross project access for Security policy bot...

CVE-2025-20045

When SIP session Application Level Gateway mode ALG profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached...

RHSA-2025:1133 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2025:1089 Red Hat Security Advisory: ovn22.03 security update

Bulletin has no description...

RHSA-2025:1085 Red Hat Security Advisory: ovn22.09 security update

Bulletin has no description...

BIT-GITLAB-2024-3976 Missing Authorization in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to disclose via the UI the confidential issues title and description from a public project to...

MAL-2025-1249 Malicious code in internallib_v331 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7396dc02a5405a71efdc0e63b0eaca22d4ba3161189c8366d3bb835fc7a18b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2023-52924

Bulletin has no description...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: gobump, cloud-provider-azure-fips, temporal-server, kubevela, istio-pilot-discovery, aws-flb-kinesis, dcgm-exporter, sops-fips, crossplane-provider-aws-cloudformation, trivy-fips, amazon-cloudwatch-agent-operator-fips, crossplane-provider-aws-kms, esbuild,...

CVE-2024-37358 Apache James: denial of service through the use of IMAP literals

Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used to cause unbounded memory allocation and very long computations Version 3.7.6 and 3.8.2 restrict such illegitimate...

GHSA-89FP-F5MX-748X vxe-table prototype pollution

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2025-23832

Cross-Site Request Forgery CSRF vulnerability in Matt Gibbs Admin Cleanup admin-cleanup allows Stored XSS.This issue affects Admin Cleanup: from n/a through = 1.0.2...

CVE-2025-24561

Cross-Site Request Forgery CSRF vulnerability in awcode ReviewsTap reviewstap allows Stored XSS.This issue affects ReviewsTap: from n/a through = 1.1.2...

CVE-2022-43684

ServiceNow has released patches and an upgrade that address an Access Control List ACL bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: Quebec prior to Patch 10 Hot Fix 8b Rome prior to Patch 10 Hot Fix 1 San...

CVE-2022-43538

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...