Vulnerability in MongoDB-Mongoose - PSIRT-2080 - TLP:CLEAR - Version: 2.5 - CVE-2025-23061
|
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate()
match, leading to search injection. Mongoose, a popular MongoDB object
modelin... |
2025/09/18 11:35:45 GMT+2 |
Vulnerability in NVIDIA GPU Display Driver - PSIRT-1742 - TLP:CLEAR - Version: 0.5 - CVE-2024-0126 CVE-2024-0131 CVE-2024-0147
|
NVIDIA reported information about NVIDIA GPU Display Driver for Windows and
Linux contains a vulnerability which could allow a privileged attacker to escalate
p... |
2025/09/18 11:16:06 GMT+2 |
Multiple vulnerabilities in Elastic products - PSIRT-2079 - TLP:CLEAR - Version: 0.4 - CVE-2024-37284 CVE-2024-43709 CVE-2024-52973
|
CVE-2024-37284 - 5.5 (Medium)
Elastic Defend Improper Handling of Alternate Encoding Leads to Crash (ESA2024-24)
Improper handling of alternate encoding occurs ... |
2025/09/12 09:22:05 GMT+2 |
NVIDIA CUDA Toolkit vulnerabilities - PSIRT-2196 - TLP:CLEAR - Version: 0.2
|
NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the
cuobjdump binary, where a user could cause a crash by passing a malformed ELF
file to ... |
2025/09/11 11:27:44 GMT+2 |
Vulnerability in Hashicorp - PSIRT-1718 - TLP:CLEAR - Version: 0.4 - CVE-2024-8365
|
Vault Community Edition and Vault Enterprise experienced a regression where
functionality that HMAC’d sensitive headers in the configured audit device,
specif... |
2025/09/11 11:20:52 GMT+2 |
Packages
|
List of available packages. |
2025/07/24 13:26:42 GMT+2 |
Update Package 1.0.2 Linux
|
|
2025/07/24 13:11:20 GMT+2 |
Update Package 1.0.2 Windows
|
|
2025/07/24 11:46:21 GMT+2 |
Vulnerability in virtualenv - PSIRT-1974 - TLP:CLEAR - Version: 0.3 - CVE-2024-53899
|
A flaw was found in the virtualenv Python package. Due to the improper handling
of quotes in magic template strings, the virtual environment activation script i... |
2025/07/22 17:56:14 GMT+2 |
Partial Fix in Spring Framework - PSIRT-1939 - TLP:CLEAR - Version: 0.3 - CVE-2024-38820
|
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case
insensitive.
However, String.toLowerCase() has
some
Locale
dependent
exceptions tha... |
2025/07/22 17:54:34 GMT+2 |