31008 matches found
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: nodetaint, ip-masq-agent, kubeflow-pipelines, k8s-device-plugin, spark-operator, argocd-image-updater, kubernetes-csi-driver-hostpath, local-static-provisioner, aws-efs-csi-driver, cri-tools, kubernetes-dns-node-cache...
GO-2024-3286 vulnerabilities
Vulnerabilities for packages: nodetaint, ip-masq-agent, kubeflow-pipelines, k8s-device-plugin, argocd-image-updater, local-static-provisioner, aws-efs-csi-driver, kubernetes-dns-node-cache...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: nodetaint, ip-masq-agent, prometheus-adapter, spark-operator, aws-efs-csi-driver, kubernetes-dns-node-cache...
GO-2025-4233 vulnerabilities
Vulnerabilities for packages: k3s, dkron, kubo, spegel, caddy, k8sgateway, q, traefik, seaweedfs, buf, kargo, frp, kubernetes-dns-node-cache, ipfs-cluster...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: k3s, spegel, caddy, q, cloudflared, buf, frp, kubernetes-dns-node-cache...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: k3s, flannel, undock, hubble-ui, terraform-mcp-server, timoni, sriov-network-device-plugin, flux-notification-controller, dex, k3d, podinfo, s5cmd, kubeflow, falcosidekick, gogatekeeper, slsa-verifier, git-sync, kustomize, neuvector-sigstore-interface, nri-redis,...
RLSA-2026:54509 Important: bind9.16 security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
bind9.16 security update
An update is available for bind9.16. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Na...
CVE-2026-18109
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
CVE-2026-18109 W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
EUVD-2026-58570
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
CVE-2026-18109 W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
CVE-2026-18109
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.10.3 . The root cause is insufficient input sanitization and output escaping of the Comment Author Name . An unauthenticated attacker can inject arbitrary web scripts t...
CVE-2026-18109
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
HTTP-Daemon: Improper header handling
Background HTTP-Daemon provides a base class for simple HTTP servers. Description Inconsistent Interpretation of HTTP Requests. Impact The bug could potentially be exploited to gain privileged access to APIs or poison intermediate caches. Workaround There is no known workaround at this time...
CVE-2026-73846: Insufficient Verification of Data Authenticity
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
CVE-2026-18109: Improper Neutralization of Input During Web Page Generation
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
VulnCheck KEV: CVE-2026-18109
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
PT-2026-71950
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
AlmaLinux 8 : bind (ALSA-2026:54654)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54654 advisory. bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-13321 bind: bind9: Potential memory usage beyond configured limits...