PT-2025-34027 · Mir · Mir

Name of the Vulnerable Software and Affected Versions: MiR software versions prior to 3.0.0 Description: MiR software versions prior to 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes intended only for administrative users...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: trivy-fips, conftest, syft-fips, cloudbeat, wolfictl, terraform-fips, conftest-fips, zot, trivy-operator, tflint, opentofu-fips, opentofu, grype-fips, tfsec, cloudbeat-fips, steampipe, zarf, chainctl, rancher-fleet, kots, kubescape, snyk-cli, rancher-fleet-fips, gryp...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: trivy-fips, conftest, syft-fips, cloudbeat, wolfictl, terraform-fips, conftest-fips, zot, trivy-operator, tflint, opentofu-fips, opentofu, grype-fips, tfsec, cloudbeat-fips, steampipe, zarf, chainctl, rancher-fleet, kots, kubescape, snyk-cli, rancher-fleet-fips, gryp...

MAL-2025-34672 Malicious code in teltonika-consumer-fleet (npm)

The package teltonika-consumer-fleet was found to contain malicious code...

Malicious code in fleet.vimcar.com (npm)

The package fleet.vimcar.com was found to contain malicious code...

Malicious code in teltonika-consumer-fleet (npm)

The package teltonika-consumer-fleet was found to contain malicious code...

CVE-2025-6261

The Fleetwire Fleet Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fleetwirelist shortcode in all versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-6261 Fleetwire Fleet Management Plugin <= 1.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via fleetwire_list Shortcode

The Fleetwire Fleet Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fleetwirelist shortcode in all versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2025-30516 · WordPress · Fleetwire Fleet Management

Name of the Vulnerable Software and Affected Versions: Fleetwire Fleet Management versions prior to 1.0.20 Description: The Fleetwire Fleet Management plugin for WordPress is susceptible to stored cross-site scripting through the fleetwire list shortcode due to insufficient input sanitization and...

WordPress plugin Fleetwire Fleet Management 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: kargo, kots, trivy, eksctl, chart-testing, zarf, linkerd2, cluster-api-helm-controller, helm-operator, k8ssandra-client, flux-source-controller, helm-docs, flux-helm-controller, istio, pluto, chartmuseum, rancher-helm, k8sgpt, cert-manager-cmctl, tw, cerbos,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: kargo, kots, trivy, eksctl, chart-testing, zarf, linkerd2, cluster-api-helm-controller, helm-operator, k8ssandra-client, flux-source-controller, helm-docs, flux-helm-controller, istio, pluto, chartmuseum, rancher-helm, k8sgpt, cert-manager-cmctl, tw, cerbos,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, cert-manager-cmctl, trivy-fips, k8ssandra-client-fips, k8ssandra-client, cerbos, cilium-cli, envoy-gateway-fips, cert-manager-cmctl-fips, harbor, chartmuseum, zot, k8sgpt, cluster-api-helm-controller, flux-helm-controller, helm-operator,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, cert-manager-cmctl, trivy-fips, k8ssandra-client-fips, k8ssandra-client, cerbos, cilium-cli, envoy-gateway-fips, cert-manager-cmctl-fips, harbor, chartmuseum, zot, k8sgpt, cluster-api-helm-controller, flux-helm-controller, helm-operator,...

CVE-2021-21296

Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is currently ongoing. We believe the...

CVE-2019-1020009

Fleet before 2.1.2 allows exposure of SMTP credentials...

Assured Telematics Fleet Management System 安全漏洞

Assured Telematics Fleet Management System is an IoT solution for fleet management from Assured Telematics that provides real-time vehicle tracking, driving behavior analysis, fuel efficiency optimization, and maintenance schedule management capabilities for logistics and transportation and fleet...

GO-2025-3649 Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet

Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation during SSH connections if the certificate isn’t set in the knownhosts file. An attacker can intercept and manipulate data by positioning themselves between the client and server, effectively conducting a...

PT-2025-19348 · Fleet · Fleet

Name of the Vulnerable Software and Affected Versions: Fleet versions prior to v0.10.12 Fleet versions prior to v0.11.7 Fleet versions prior to v0.12.2 Description: A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate whe...