11478 matches found
PT-2026-77588
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successf...
CVE-2026-70956: Missing Authentication for Critical Function
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2026-62523: Improper Access Control
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperio...
CVE-2026-62492: Improper Access Control
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...
CVE-2026-62485: Improper Access Control
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion...
CVE-2026-62457: Improper Access Control
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion...
CVE-2026-62467: Improper Access Control
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion...
CVE-2026-70966: Improper Access Control
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2026-50601: Use of Hard-coded Credentials
A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-sns-fips, cluster-api-ipam-provider-in-cluster, kubernetes-event-exporter-fips, step-kms-plugin, prometheus-elasticsearch-exporter, chainloop-cli-fips, crossplane-provider-aws-ce, cue-fips, jobset,...
cynative v1.9.2
Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning through GitHub, GitLab,...
GO-2024-2500 vulnerabilities
Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...
GO-2022-0968 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, k3d, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow, terraform-provider-sendgrid, kubeflow-fips...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: consul-k8s, envoy-gateway, linkerd2, harbor-fips, headlamp-fips, nova, k8ssandra-client, k9s, flux-fips, pluto-fips, cert-manager-cmctl-fips, helm-docs, zarf, headlamp, trivy-operator-fips, k9s-fips, eksctl, cilium-cli, k8sgpt, helm-push, teleport, flux,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: kaniko, buildkitd, k9s, newrelic-infrastructure-agent, zarf, k3d, skaffold, ctop, grype, runc, kubernetes, skopeo, nerdctl, cadvisor, docker, syft, podman, trivy, kots, k3s, kubescape, zot, wolfictl...
GO-2026-5005 vulnerabilities
Vulnerabilities for packages: harbor-fips, prometheus-elasticsearch-exporter, external-secrets-operator, gitlab-kas, aactl, kyverno, reports-server, minio, gitlab-workhorse-ce-fips, falco-no-driver, kubernetes, traefik-fips, vault-fips, frankenphp-8.4, etcd-fips, backup-restore-operator,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: runc, ctop, kaniko, zot, skaffold, trivy, zarf, podman, syft, newrelic-infrastructure-agent, buildkitd, kubernetes, kubescape, wolfictl, nerdctl, kots, skopeo, grype, cadvisor, k3d, docker, k3s, k9s...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: k8sgpt, ctop, flux-helm-controller, cilium-cli, kaniko, melange, fuse-overlayfs-snapshotter, zot, skaffold, trivy, kubevela, gitness, newrelic-infrastructure-agent, up, buildkitd, kubescape, helm, kots, flux-source-controller, grype, helm-push, k3d, eksctl...
GO-2025-4135 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, atlantis, cfssl, buf, crossplane-provider-aws-route53, kube-bench, kubeflow-katib, promxy, ollama, gcsfuse, buildah, bom, cilium-cli, docker-credential-acr-env, gomplate, flux, pgtimetable, argo-rollouts, blobfuse2, terragrunt,...
