CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24

CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24. A patched version of the package is available...

ChanCMS 安全漏洞

ChanCMS is a content management system by yanyutao0402 individual developer in China. A security vulnerability exists in ChanCMS version 3.3.4, which originates from a template injection in the /vip/v1/file/save component, which may result in the execution of arbitrary code...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: podman, nri-rabbitmq, gitsign, pulumi-kubernetes-operator, gitaly, tempo, flannel-cni-plugin, percona-server-mongodb-operator, gitness, k3s, neuvector-dbgen, terraform-provider-google, polaris, sftpgo-plugin-kms, kubescape, task, k8ssandra-operator, op-geth, sftpgo,...

AZL-71614 CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

EUVD-2018-20791

Malware in sbrugna...

EUVD-2016-7511

Malware in sbrugna...

EUVD-2019-4340

Malware in sbrugna...

EUVD-2017-15390

Malware in sbrugna...

EUVD-2019-19062

Malware in sbrugna...

EUVD-2023-43708

Malicious code in bioql PyPI...

EUVD-2024-51176

Malicious code in bioql PyPI...

EUVD-2024-51177

Malicious code in bioql PyPI...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, container-object-storage-interface, sftpgo-plugin-geoipfilter, gitsign, newrelic-nri-statsd, kube-vip-cloud-provider, custom-pod-autoscaler-operator, vexctl, rancher-machine, nats, lvm-driver, newrelic-fluent-bit-output, dagdotdev,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, container-object-storage-interface, sftpgo-plugin-geoipfilter, gitsign, newrelic-nri-statsd, kube-vip-cloud-provider, custom-pod-autoscaler-operator, vexctl, rancher-machine, nats, lvm-driver, newrelic-fluent-bit-output, dagdotdev,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: hivemind, shfmt, terraform-provider-sendgrid-fips, vault-benchmark, k8sgpt-operator, php-fpmexporter, docker-credential-ecr-login, eks-distro-fips, newrelic-fluent-bit-output, prometheus-process-exporter, modelmesh-runtime-adapter, yace-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: hivemind, shfmt, terraform-provider-sendgrid-fips, vault-benchmark, k8sgpt-operator, php-fpmexporter, docker-credential-ecr-login, eks-distro-fips, newrelic-fluent-bit-output, prometheus-process-exporter, modelmesh-runtime-adapter, yace-fips,...

DEBIAN-CVE-2022-50309

In the Linux kernel, the following vulnerability has been resolved: media: xilinx: vipp: Fix refcount leak in xvipgraphdmainit ofgetchildbyname returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

MAL-2025-41491 Malicious code in @twork-data-services/customer-api-v2-customer-vip-status (npm)

--- -= Per source details. Do not edit below this line.=-...

Important: ppp

Issue Overview: The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges. CVE-2024-58250 Affected Packages: ppp Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

CVE-2024-12896

A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic. Affected by this issue is some unknown functionality of the file /webcaps/webCapsConfig of the component Web Interface. The manipulation leads to...