CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, step-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, aws-privateca-issuer, cert-exporter...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, step-issuer-fips, aws-privateca-issuer, cert-manager-istio-csr, step-issuer, cert-exporter-fips, cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-cmctl, aws-privateca-issuer-fips, cert-exporter...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, step-issuer-fips, aws-privateca-issuer, cert-manager-istio-csr, step-issuer, cert-exporter-fips, cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-cmctl, aws-privateca-issuer-fips, cert-exporter...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: go-discover, wavefront-collector-for-kubernetes, sonobuoy-fips, aws-flb-firehose, kiam, consul, neuvector-dbgen-fips, aws-flb-cloudwatch-fips, newrelic-nri-statsd, sonobuoy, kubeflow, aws-flb-cloudwatch, aws-flb-firehose-fips, kpt, src-fingerprint-fips,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: go-discover, wavefront-collector-for-kubernetes, sonobuoy-fips, aws-flb-firehose, kiam, consul, neuvector-dbgen-fips, aws-flb-cloudwatch-fips, newrelic-nri-statsd, sonobuoy, kubeflow, aws-flb-cloudwatch, aws-flb-firehose-fips, kpt, src-fingerprint-fips,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: tigera-operator, cloudprober-fips, newrelic-fluent-bit-output-fips, cert-manager-google-cas-issuer-fips, apm-server-fips, tigera-operator-fips, grpc-health-probe-fips, secrets-store-csi-driver-provider-azure, grpc-health-probe, cloudnative-pg-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: opa-envoy, portieris, terraform-provider-sendgrid, k8ssandra-operator, hello-world-golang, sqlexporter, neuvector-dbgen, nri-haproxy, sonobuoy, kpt, nri-mysql, pguser, sealed-secrets, gotestsum, secrets-store-csi-driver-provider-azure, pdfcpu, kube-vip, nerdctl,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: opa-envoy, portieris, terraform-provider-sendgrid, k8ssandra-operator, hello-world-golang, sqlexporter, neuvector-dbgen, nri-haproxy, sonobuoy, kpt, nri-mysql, pguser, sealed-secrets, gotestsum, secrets-store-csi-driver-provider-azure, pdfcpu, kube-vip, nerdctl,...

OSV-2025-965 Stack-use-after-scope in Assimp::FBX::FBXExportProperty::FBXExportProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=465494996 Crash type: Stack-use-after-scope READ 1 Crash state: Assimp::FBX::FBXExportProperty::FBXExportProperty Assimp::FBX::FBXExportProperty std::1::vectorAssimp::FBX::FBXExportProperty, Assimp::FBXExporter::WriteObjects...

WordPress Export All Posts, Products, Orders, Refunds & Users plugin <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure vulnerability

Cross-Site Request Forgery to Sensitive Information Exposure vulnerability discovered by luckybuddy in WordPress Plugin WP Ultimate Exporter versions = 2.19...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, cluster-api-aws-controller, jitsucom-bulker, opentelemetry-collector-contrib, grafana-alloy, argo-events, sqlexporter, bento, splunk-otel-collector...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, argo-events, cluster-api-aws-controller, jitsucom-bulker, sqlexporter-fips, amazon-cloudwatch-agent-fips, argo-events-fips, vault-fips, grafana-alloy, splunk-otel-collector-fips, opentelemetry-collector-contrib, bento,...

EUVD-2025-197689

A vulnerability was found in D-Link DIR-816L 206b09beta. This vulnerability affects the function scandirmain of the file /portal/ajaxexporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public a...

CVE-2025-13190

A vulnerability was found in D-Link DIR-816L 206b09beta. This vulnerability affects the function scandirmain of the file /portal/ajaxexporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public a...

CVE-2025-60203

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

EUVD-2025-38112

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203 WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203 WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203

The CVE-2025-60203 entry concerns the WordPress Store Exporter plugin (woocommerce-exporter) with a Local File Inclusion flaw caused by improper control of filenames for include/require statements. Affected are Store Exporter versions up to and including 2.7.6. The vulnerability enables PHP Local...