7454 matches found
EUVD-2026-51312
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2026-62845
Kamaji (Hosted Control Plane Manager for Kubernetes) is affected by a SQL injection in the PostgreSQL and MySQL datastore drivers. The root cause is that DataStoreUsername and DataStoreSchema are interpolated into SQL statements via fmt.Sprintf without escaping identifiers, and these fields have ...
SUSE CVE-2026-49338
gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, the Subsonic API endpoints /rest/deletePlaylist.view and /rest/getPlaylist.view perform no per-resource authorization. Once authenticated as any user admin or not, an attacker can delete...
CVE-2026-67596 CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg
CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...
CVE-2026-67596
CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...
CVE-2026-54367
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...
EUVD-2026-51103
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...
CVE-2026-54367
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...
OPENSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c...
[SECURITY] [DSA 6404-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6404-1 [email protected] https://www.debian.org/security/ Aron Xu July 30, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------...
CVE-2026-44100
The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...
CLEANSTART-2026-WE34008 Security fixes in kustomize 5.7.1-r3
Package kustomize version 5.7.1-r3 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-27137, CVE-2026-25679, CVE-2026-27138...
CLEANSTART-2026-IE12659 Security fixes in logstash-fips 9.2.6-r0
Package logstash-fips version 9.2.6-r0 fixes 12 vulnerabilities: ghsa-mxw3-3hh2-x2mh, ghsa-whrj-4476-wvmp, ghsa-2xgq-q749-89fq, CVE-2025-14762, CVE-2026-22860...
CLEANSTART-2026-PW64435 Security fixes in prometheus-statsd-exporter 0.28.0-r1
Package prometheus-statsd-exporter version 0.28.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27141...
CLEANSTART-2026-NC44965 Security fixes in curl 7.74.0-r0
Package curl version 7.74.0-r0 fixes 3 vulnerabilities: CVE-2020-8284, CVE-2020-8285, CVE-2020-8286...
CLEANSTART-2026-JQ21017 Security fixes in istio 1.30.1-r0
Package istio version 1.30.1-r0 fixes 4 vulnerabilities: CVE-2026-42505, CVE-2026-39822, CVE-2026-56852, CVE-2026-46600...
CLEANSTART-2026-EL73954 Security fixes in argo-cd 3.3.5-r1
Package argo-cd version 3.3.5-r1 fixes 13 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CLEANSTART-2026-QZ83575 Security fixes in elastic-beats 9.2.8-r6
Package elastic-beats version 9.2.8-r6 fixes 5 vulnerabilities: CVE-2026-42151, CVE-2026-42154, CVE-2026-40179, CVE-2026-44903, ghsa-hrxh-6v49-42gf...