653 matches found
GO-2024-2920 vulnerabilities
Vulnerabilities for packages: zot, melange, dagger, guac...
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: slsa-verifier, gh, cosign...
GO-2023-2102 vulnerabilities
Vulnerabilities for packages: dgraph, gomplate, hugo, atlantis, kubewatch, amass, nri-prometheus, vault-k8s, stakater-reloader, bank-vaults, k3d, kubernetes-dns-node-cache, kubernetes-csi-livenessprobe, k8sgpt-operator, kube-fluentd-operator, kubernetes-ingress-defaultbackend, sigstore-scaffoldin...
GO-2024-2718 vulnerabilities
Vulnerabilities for packages: falcoctl, kubescape, wolfictl, spire-server, flux-source-controller, ko, melange, aactl, tkn, zarf, goreleaser, neuvector-sigstore-interface, vexctl, policy-controller, skaffold, tekton-chains, gitsign, zot, apko, slsa-verifier...
UBUNTU-CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...
UBUNTU-CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...
Linux Distros Unpatched Vulnerability : CVE-2026-6727
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may b...
CVE-2026-64934
The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...
CVE-2026-71331
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
CVE-2026-66802
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
EUVD-2026-56771
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
EUVD-2026-56746
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
CVE-2026-66802
CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...
DEBIAN-CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...
DEBIAN-CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...
CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...