Envoy Gateway Log Injection Vulnerability

Impact In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to th...

CVE-2024-58086

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor v3d-activeperfmon is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the...

CVE-2025-21825

CVE-2025-21825 affects the Linux kernel’s BPF subsystem when PREEMPT_RT is enabled. The issue arises in the bpf_timer cancellation path during map update of preallocated htab elements: freeing of old_element under the bucket lock can race with reuse of the same element, potentially triggering a l...

CVE-2024-58060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject structops registration that uses module ptr and the module btfid is missing There is a UAF report in the bpfstructops when CONFIGMODULES=n. In particular, the report is on tcpcongestionops that has a "struct module...

Security Bulletin: Security vulnerabilities may affect IBM SDK, Java Technology Edition shipped with IBM TXSeries for Multiplatforms.

Summary Security vulnerabilities may affect IBM SDK, Java Technology Edition shipped with IBM TXSeries for Multiplatforms. Updates to IBM TXSeries for Multiplatforms have been released to address these vulnerabilities. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java ...

Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution

Elastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization dashboard software for Elasticsearch that could result in arbitrary code execution. The vulnerability, tracked as CVE-2025-25015 , carries a CVSS score of 9.9 out of a maximum of...

Important: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. The microcodectl packages provide microcode...

Linux Distros Unpatched Vulnerability : CVE-2025-20128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the Object Linking and Embedding 2 OLE2 decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of...

Fedora 41 : firefox (2025-60c0e24d76)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-60c0e24d76 advisory. - Updated to latest upstream 136.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Critical Photon OS Security Update - PHSA-2025-4.0-0765

Updates of 'libxml2', 'rubygem-activesupport', 'gettext' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-5.0-0485

Updates of 'rubygem-activesupport', 'gettext', 'libxml2' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2024-56773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunitdevicedrivertest kunitkzalloc may return a NUL...

electron33 -- multiple vulnerabilities

Electron develpers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2025-0445. Security: backported fix for CVE-2025-0995. Security: backported fix for CVE-2025-0998...

CLSA-2025-1741216500 Fix CVE(s): CVE-2024-31068, CVE-2024-36293, CVE-2024-39279

New microcode update packages from upstream up to 2025-02-11: - New microcodes: sig 0x000a06f3, pfmask 0x01, 2024-11-22, rev 0x3000330, size 1533952 sig 0x000b0674, pfmask 0x32, 2024-09-25, rev 0x012c, size 211968 sig 0x000b06f6, pfmask 0x07, 2024-08-01, rev 0x0038, size 225280 sig 0x000b06f7,...

CVE-2023-38693

Lucee Server or simply Lucee is a dynamic, Java based, tag and scripting language used for rapid web application development. The Lucee REST endpoint is vulnerable to RCE via an XML XXE attack. This vulnerability is fixed in Lucee 5.4.3.2, 5.3.12.1, 5.3.7.59, 5.3.8.236, and 5.3.9.173...

Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability

A vulnerability in the interprocess communication IPC channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client. This...

RUSTSEC-2025-0010 Versions of *ring* prior to 0.17 are unmaintained.

ring 0.16.20 was released over 4 years ago and isn't maintained, tested, etc. Additionally, the project's general policy is to only patch the latest release, which is 0.17.12 now. It will be difficult for anybody to backport future fixes to versions earlier than 0.17.10 due to license changes...

CVE-2025-1916

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6483 2025-03-05 06:04:06+00:00| seen| https://t.me/cvedetector/19578 2025-03-05 06:44:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114108469900652674 2025-03-05...

CVE-2025-1917

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6482 2025-03-05 06:04:07+00:00| seen| https://t.me/cvedetector/19579 2025-03-05 07:19:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv4iuta22 2025-03-11...

CVE-2025-1919

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6480 2025-03-05 06:04:12+00:00| seen| https://t.me/cvedetector/19581 2025-03-05 07:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv6ih522e 2025-03-06...