417 matches found
CVE-2025-54470 NeuVector telemetry sender is vulnerable to MITM and DoS
This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server. In affected versions, NeuVector does not enforce TLS certificate verification when...
SUSE CVE-2025-54470
This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server. In affected versions, NeuVector does not enforce TLS certificate verification when...
EUVD-2021-2101
Malware in sbrugna...
EUVD-2021-25726
Malware in sbrugna...
EUVD-2021-25720
Malware in sbrugna...
EUVD-2021-23371
Malware in sbrugna...
EUVD-2020-27018
Malware in sbrugna...
EUVD-2021-16092
Malware in sbrugna...
EUVD-2021-25719
Malware in sbrugna...
EUVD-2024-26226
Malicious code in bioql PyPI...
EUVD-2022-1027
Malicious code in bioql PyPI...
EUVD-2022-50516
Malicious code in bioql PyPI...
EUVD-2025-19013
Malicious code in bioql PyPI...
podman security update
An update is available for podman. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...
CLSA-2025-1759497192 perl-CPAN: Fix of CVE-2023-31484
CVE-2023-31484: verify TLS certificates when downloading distributions over HTTPS...
CVE-2025-59347
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in HTTP clients. The clients are not configurable, so users have no way to re-enable the verification. A Manager processes dozens of preheat job...
CVE-2025-34199
Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 VA and SaaS deployments contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communications to printers and internal...
CVE-2025-59347 Dragonfly Manager makes requests to external endpoints with disabled TLS authentication
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in HTTP clients. The clients are not configurable, so users have no way to re-enable the verification. A Manager processes dozens of preheat job...
Security update for podman
This update for podman fixes the following issues: CVE-2025-6032: Machine init command fails to verify TLS certificate when downloading VM images from an OCI registry bsc1245320. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...
