GO-2024-2597 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2023-2166 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2716 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2023-2133 vulnerabilities

Vulnerabilities for packages: nats...

GO-2026-4423 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cortex, rancher-agent, temporal-ui-server, terraform-provider-azurerm, redka, snyk-cli, kubernetes-event-exporter, kube-logging-operator, grafana-mimir, kube-state-metrics, slsa-verifier, migrate, crossplane-provider-aws-s3, k3s, kots, fluent-bit-plugin-loki, opentof...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: fulcio, rancher-agent, terraform-provider-azurerm, cilium, gitea, snyk-cli, rancher-machine, slsa-verifier, crossplane-provider-aws-s3, k3s, kots, crossplane-provider-aws-iam, opentofu, trivy-operator, crossplane-provider-aws-sns, openbao, docker, minio,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: bank-vaults, fulcio, rook, terraform-provider-azurerm, actions-runner-controller, goreleaser, guac, kubevela, snyk-cli, buildkitd, crossplane-provider-family-azure, kubernetes-event-exporter, grafana-mimir, slsa-verifier, terraform, aactl, k3s,...

WordPress WP Photo Album Plus plugin < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability

Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability discovered by Farid Narimanov in WordPress Plugin WP Photo Album Plus versions 9.2.09.002...

CLSA-2026-1786693842 TuxCare security update for org.springframework.security:spring-security-oauth2-authorization-server (6 CVEs)

TuxCare rebuilt org.springframework.security:spring-security-oauth2-authorization-server to address 6 CVEs. Fixed in 1.3.7-tuxcare.4...

OPENSUSE-SU-2026:21580-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...

SUSE-SU-2026:23223-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...

SUSE-SU-2026:23157-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...

SUSE-SU-2026:23235-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...

CVE-2026-16739

The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.4 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that any payment actually occurred, allowing unauthenticated attackers to mark arbitrary orders as confirmed and, in a...

CVE-2026-19784

A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...

EUVD-2026-58568

A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...

CVE-2026-19784 francoisjacquet RosarioSIS Referrals.php DBUpdate authorization

A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...

CVE-2026-19784 francoisjacquet RosarioSIS Referrals.php DBUpdate authorization

A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...