GHSA-6H9X-9J5V-7W9H Rancher Fleet Helm Values are stored inside BundleDeployment in plain text

Impact A vulnerability has been identified when using Fleet to manage Helm charts where sensitive information is passed through BundleDeployment.Spec.Options.Helm.Values may be stored in plain text. This can result in: 1. Unauthorized disclosure of sensitive data: Any user with GET or LIST...

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text

Impact A vulnerability has been identified when using Fleet to manage Helm charts where sensitive information is passed through BundleDeployment.Spec.Options.Helm.Values may be stored in plain text. This can result in: 1. Unauthorized disclosure of sensitive data: Any user with GET or LIST...

PT-2025-35331

Name of the Vulnerable Software and Affected Versions SUSE Fleet versions prior to v0.14.0 SUSE Fleet version v0.13.1 SUSE Fleet version v0.12.6 SUSE Fleet version v0.11.10 Description A vulnerability exists in SUSE Fleet when managing Helm charts, where sensitive information passed through...

CVE-2025-9229 Information Disclosure in MiR robots and MiR fleet through verbose error pages

Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages...

CVE-2025-9225

Stored cross-site scripting XSS in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser...

CVE-2025-9225 Cross-site scripting (XSS) in MiR robots and MiR fleet

Stored cross-site scripting XSS in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser...

CVE-2025-9225 Cross-site scripting (XSS) in MiR robots and MiR fleet

Stored cross-site scripting XSS in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser...

CVE-2025-9225

CVE-2025-9225 affects MiR software prior to 3.0.0 in MiR Robots and MiR Fleet. The issue is a stored cross-site scripting (XSS) in the web interface, enabling execution of arbitrary JavaScript in a victim’s browser. Root cause details are not elaborated beyond the XSS attribution in multiple sour...

PT-2025-33906 · Mir · Mir

Name of the Vulnerable Software and Affected Versions: MiR software versions prior to 3.0.0 Description: Stored cross-site scripting in the web interface allows execution of arbitrary JavaScript code in a victim’s browser. Recommendations: Update MiR software to version 3.0.0 or later...

PT-2025-34027 · Mir · Mir

Name of the Vulnerable Software and Affected Versions: MiR software versions prior to 3.0.0 Description: MiR software versions prior to 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes intended only for administrative users...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: k9s, kots, steampipe, grype-fips, syft-fips, terraform-fips, trivy-operator, cloudbeat, xeol-fips, zarf, wolfictl, xeol, grype-db, opentofu-fips, tflint, tfsec, conftest, cloudbeat-fips, kubescape, trivy-fips, rancher-fleet-fips, zot, conftest-fips, snyk-cli, chainct...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: k9s, kots, steampipe, grype-fips, syft-fips, terraform-fips, trivy-operator, cloudbeat, xeol-fips, zarf, wolfictl, xeol, grype-db, opentofu-fips, tflint, tfsec, conftest, cloudbeat-fips, kubescape, trivy-fips, rancher-fleet-fips, zot, conftest-fips, snyk-cli, chainct...

MAL-2025-34672 Malicious code in teltonika-consumer-fleet (npm)

The package teltonika-consumer-fleet was found to contain malicious code...

Malicious code in fleet.vimcar.com (npm)

The package fleet.vimcar.com was found to contain malicious code...

Malicious code in teltonika-consumer-fleet (npm)

The package teltonika-consumer-fleet was found to contain malicious code...

CVE-2025-6261

The Fleetwire Fleet Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fleetwirelist shortcode in all versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-6261 Fleetwire Fleet Management Plugin <= 1.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via fleetwire_list Shortcode

The Fleetwire Fleet Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fleetwirelist shortcode in all versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin Fleetwire Fleet Management 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-30516 · WordPress · Fleetwire Fleet Management

Name of the Vulnerable Software and Affected Versions: Fleetwire Fleet Management versions prior to 1.0.20 Description: The Fleetwire Fleet Management plugin for WordPress is susceptible to stored cross-site scripting through the fleetwire list shortcode due to insufficient input sanitization and...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: cilium-cli, kargo, cert-manager-cmctl, k8ssandra-client, k9s, rancher-helm, zot, kots, trivy, flux-source-controller, helm-push, envoy-gateway, istio, zarf, helm-operator, k8sgpt, eksctl, helm-docs, cerbos, cluster-api-helm-controller, pluto, linkerd2, rancher-fleet,...