GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, wireguard-go, kube-logging-operator-custom-runner, controller-gen,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner, controller-gen, gotestsum,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The race condition related to PreauhHashValue has been fixed. If a client sends multiple session setup requests to ksmbd, a race condition related to PreauhHashValue may occur. There is no need to free sess-PreauhHashValue...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer is set to 80 characters. If a caller writes more characters, the count is truncated to the maximum available space in “simplewritetobuffer”. However, after that, a string terminator...

Astra Linux - уязвимость в curl

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

F5 Networks F5OS-C DoS (K000151718)

The version of F5 Networks F5OS-C installed on the remote host is affected by a vulnerability as referenced in the K000151718 advisory. - When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate. Note...

CVE-2025-62792

CVE-2025-62792 affects Wazuh prior to 4.12.0, where a buffer over-read occurs in w_expression_match() because the buffer allocated in OS_CleanMSG() is not properly NULL terminated. This allows a compromised agent to trigger a read beyond the end of the allocated buffer by sending a crafted messag...

CVE-2025-62781

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.8.0, users with a local account can change their password while logged in. When doing so, all other active sessions are terminated, except for the currently active one. However, the current session’s...

CVE-2025-62781

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.8.0, users with a local account can change their password while logged in. When doing so, all other active sessions are terminated, except for the currently active one. However, the current session’s...

EUVD-2025-36381

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.8.0, users with a local account can change their password while logged in. When doing so, all other active sessions are terminated, except for the currently active one. However, the current session’s...

CVE-2025-55067

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...

EUVD-2023-60026

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: use vector instructions only if available for ChaCha20 Commit 349d03ffd5f6 "crypto: s390 - add crypto library interface for ChaCha20" added a library interface to the s390 specific ChaCha20 implementation. However no...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mismatch in the return type of the netiucvtx function, which could lead to a kernel panic or thread...

CVE-2025-43282

A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. An app may be able to cause unexpected system termination...

CVE-2025-61990

When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-61935

When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59778

When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...