GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli, dask-gateway,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer is set to 80 characters. If a caller writes more characters, the count is truncated to the maximum available space in “simplewritetobuffer”. However, after that, a string terminator...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ACPICA: fixed the ACPI operand cache leak in dswstate.c ACPICA commit: 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I discovered a ACPI cache leak in cases where ACPI early termination occurs and the boot process continues. When earl...

Astra Linux - уязвимость в curl

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

F5 Networks F5OS-C DoS (K000151718)

The version of F5 Networks F5OS-C installed on the remote host is affected by a vulnerability as referenced in the K000151718 advisory. - When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate. Note...

CVE-2025-62792

CVE-2025-62792 affects Wazuh prior to 4.12.0, where a buffer over-read occurs in w_expression_match() because the buffer allocated in OS_CleanMSG() is not properly NULL terminated. This allows a compromised agent to trigger a read beyond the end of the allocated buffer by sending a crafted messag...

CVE-2025-62781

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.8.0, users with a local account can change their password while logged in. When doing so, all other active sessions are terminated, except for the currently active one. However, the current session’s...

CVE-2025-62781

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.8.0, users with a local account can change their password while logged in. When doing so, all other active sessions are terminated, except for the currently active one. However, the current session’s...

EUVD-2025-36381

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.8.0, users with a local account can change their password while logged in. When doing so, all other active sessions are terminated, except for the currently active one. However, the current session’s...

CVE-2025-55067

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...

EUVD-2023-60026

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: use vector instructions only if available for ChaCha20 Commit 349d03ffd5f6 "crypto: s390 - add crypto library interface for ChaCha20" added a library interface to the s390 specific ChaCha20 implementation. However no...