GO-2023-2095 vulnerabilities

Vulnerabilities for packages: configmap-reload-fips, kubeflow-katib, metrics-server, kind, smarter-device-manager-fips...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grpc-health-probe, zarf, sops, vcluster, tflint, rqlite, cloudnative-pg, terragrunt, trivy, step-ca, ksops, sigstore-scaffolding, kots, pulumi-language-dotnet, grafana-mimir, hubble-ui, temporal, conftest, falcosidekick, restic, k8sgpt-operator,...

CLEANSTART-2026-LW63559 Security fixes in smarter-device-manager 1.20.11-r2

Package smarter-device-manager version 1.20.11-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-JJ69031 Security fixes in smarter-device-manager-fips 1.20.11-r1

Package smarter-device-manager-fips version 1.20.11-r1 fixes 3 vulnerabilities: CVE-2026-46600, CVE-2026-33814, ghsa-5cv4-jp36-h3mw...

CLEANSTART-2026-EJ83238 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33186, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.1.2-r0

Multiple security vulnerabilities affect the smarter-device-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2026-34302

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, sftpgo-plugin-eventsearch, pluto, nfs-subdir-external-provisioner, secrets-store-csi-driver-provider-aws, flux-helm-controller, hubble, aws-privateca-issuer, flux-notification-controller, github-mcp-server, malcontent, flux,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: net-kourier, multus-cni, kubernetes-dashboard-api, flux, promxy, victoriametrics-cluster, knative-serving, terraform-mcp-server, flux-source-controller, minio-object-browser, terraform-docs, rancher-telemetry, croc, crossplane-provider-azure-sql, scorecard,...

Exploit for CVE-2024-23700

PoC for CVE-2024-23700, allowing silently obtain permissions to...

CLEANSTART-2026-AE87452 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.20.12-r0, 1.20.12-r1, 1.20.12-r2

Multiple security vulnerabilities affect the smarter-device-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Unspecified Vulnerability in Google Android (CNVD-2026-14652)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from a logic error in the onStart function of CompanionDeviceManagerService.java, which can be exploited by an attacker to cause a local elevation of...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

CVE-2025-48654 concerns the Android CompanionDeviceManagerService.java, where a logic error in onStart can cause a confused deputy leading to local elevation of privilege. Exploitation does not require user interaction. Affected component: CompanionDeviceManagerService (Android). Reported impact:...

ASB-A-442392902

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2025-208107

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from...

CVE-2025-5781

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from...