25062 matches found
CVE-2026-19354
A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an unknown function of the file controllers/messages/message.go of the component IN Clause Handler. Performing a manipulation of the argument ids results in sql injection. The attac...
CVE-2026-71556 vulnerabilities
Vulnerabilities for packages: cloudbeat, flux-fips, kubescape-server-fips, grype, src-fingerprint, grafana-alloy, bom, gitlab-rails-ce-fips, boring-registry-fips, flux, crossplane-fips, kots, flux-notification-controller, grafana, kyverno, grype-db, mapotf, cerbos, guac, act, nuclei, grype-fips,...
CVE-2026-71557 vulnerabilities
Vulnerabilities for packages: cloudbeat, flux-fips, kubescape-server-fips, grype, src-fingerprint, grafana-alloy, bom, gitlab-rails-ce-fips, boring-registry-fips, flux, crossplane-fips, kots, flux-notification-controller, grafana, kyverno, grype-db, mapotf, cerbos, guac, act, nuclei, grype-fips,...
GHSA-QGQ7-7HM3-Q39J vulnerabilities
Vulnerabilities for packages: cloudbeat, flux-fips, kubescape-server-fips, grype, src-fingerprint, grafana-alloy, bom, gitlab-rails-ce-fips, boring-registry-fips, flux, crossplane-fips, kots, flux-notification-controller, grafana, kyverno, grype-db, mapotf, cerbos, guac, act, nuclei, grype-fips,...
GHSA-HC8V-WWC9-VGXM vulnerabilities
Vulnerabilities for packages: cloudbeat, flux-fips, kubescape-server-fips, grype, src-fingerprint, grafana-alloy, bom, gitlab-rails-ce-fips, boring-registry-fips, flux, crossplane-fips, kots, flux-notification-controller, grafana, kyverno, grype-db, mapotf, cerbos, guac, act, nuclei, grype-fips,...
CVE-2026-71556 vulnerabilities
Vulnerabilities for packages: argo-cd, trufflehog, grype, flux-source-controller, kaniko, trivy-operator, kubescape, external-secrets-operator, scorecard, crossplane, witness, pulumi-language-java, gomplate, gitaly, pulumi-language-dotnet, steampipe, kots, pulumi-language-yaml, gitsign, skaffold,...
CVE-2026-71557 vulnerabilities
Vulnerabilities for packages: argo-cd, trufflehog, grype, flux-source-controller, kaniko, trivy-operator, kubescape, external-secrets-operator, scorecard, crossplane, witness, pulumi-language-java, gomplate, gitaly, pulumi-language-dotnet, steampipe, kots, pulumi-language-yaml, gitsign, skaffold,...
GHSA-HC8V-WWC9-VGXM vulnerabilities
Vulnerabilities for packages: argo-cd, trufflehog, grype, flux-source-controller, kaniko, trivy-operator, kubescape, external-secrets-operator, scorecard, crossplane, witness, pulumi-language-java, gomplate, gitaly, pulumi-language-dotnet, steampipe, kots, pulumi-language-yaml, gitsign, skaffold,...
GHSA-QGQ7-7HM3-Q39J vulnerabilities
Vulnerabilities for packages: argo-cd, trufflehog, grype, flux-source-controller, kaniko, trivy-operator, kubescape, external-secrets-operator, scorecard, crossplane, witness, pulumi-language-java, gomplate, gitaly, pulumi-language-dotnet, steampipe, kots, pulumi-language-yaml, gitsign, skaffold,...
CVE-2025-71412
Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71411
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71410
Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...
CVE-2025-71409 No Authentication for Very High Frequency Data Link messages used in CPDLC
Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71410
Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...
CVE-2025-71410
The CVE-2025-71410 issue affects systems handling Aviation Very High Frequency Link Control (VHF L-C) and Unnumbered Disconnect (U DISC) frames used by CPDLC. Described vulnerability can terminate sessions and cause loss of CPDLC functions, forcing a reversion to voice comms and increasing contro...
CVE-2025-71411
The CVE-2025-71411 entry describes a CPDLC-related issue where broadcast control frames can remotely disconnect multiple aircraft, causing delayed clearances and ATC overload. Affected component is broadcast/control frames in CPDLC; root cause and vendor/version details are not specified in the p...
EUVD-2025-210652
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...
EUVD-2025-210651
Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...
CVE-2026-57827 — Updated!
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...
