GO-2026-5543 vulnerabilities

Vulnerabilities for packages: trufflehog, bento, flux-source-controller, rclone, rancher-agent, external-secrets-operator, juicefs, cert-manager-csi-driver, opentofu, teleport, dex, sftpgo-plugin-auth, rancher-webhook, kyverno-notation-aws, frp, terraform, seaweedfs,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: step-issuer, percona-server-mongodb-operator, mariadb-operator, aws-privateca-issuer, cert-manager-webhook-pdns, opentelemetry-operator, cert-manager-istio-csr, cert-manager-csi-driver, cert-manager-cmctl...

GO-2026-4958 vulnerabilities

Vulnerabilities for packages: argo-cd, sonobuoy, redis-operator, postgres-operator, vcluster, istio, kube-arangodb, kiali, dynamic-localpv-provisioner, trivy-operator, kubescape, rancher-agent, gitlab-kas, k3s, teleport, kubernetes, consul-k8s, helm, velero, linkerd2, cloudnative-pg, kots,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: argo-cd, src, spicedb, docker-cli, flux-source-controller, neuvector-sigstore-interface, sriov-network-device-plugin, kube-fluentd-operator, helm, kubernetes-csi-livenessprobe, kubernetes-dns-node-cache, sftpgo-plugin-auth, step-issuer, vault-env,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, src, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, docker, flux-source-controller, neuvector-sigstore-interface, scorecard, helm, step-issuer, steampipe, tw, crossplane-provider-aws-sns, cilium-cli, nfpm, argo-events, buildkitd,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: argo-cd, fluent-bit-plugin-loki, delve, flyte, kube-fluentd-operator, scorecard, consul-k8s, helm, sftpgo-plugin-auth, regclient, step-issuer, gostatsd, cilium-cli, temporal-server, goreleaser, nfpm, argo-events, dask-gateway, govulncheck, buildkitd, apache-exporter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: src, flux-kustomize-controller, postgres-operator, pgpool2exporter, golangci-lint, crossplane-provider-azure-sql, sbomqs, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, scorecard, helm, kubernetes-csi-livenessprobe, kubernetes-dns-node-cache,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: argo-cd, src, trufflehog, flux-kustomize-controller, vcluster, grype, melange, spicedb, kiali, flux-source-controller, kaniko, neuvector-sigstore-interface, flyte, scorecard, consul-k8s, step-issuer, vault-env, kyverno-notation-aws, frp, dkron, steampipe, hydra, tw,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: src, cni-plugins, delve, docker-cli, neuvector-sigstore-interface, rclone, regclient, kyverno-notation-aws, mongo-tools, steampipe, aws-privateca-issuer, cilium-cli, argo-events, kubernetes-dashboard-web, buildkitd, tflint, cluster-api-helm-controller, cloud-sql-prox...

GO-2025-3487 vulnerabilities

Vulnerabilities for packages: src, trufflehog, vcluster, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, crossplane-provider-azure-sql, sbomqs, docker, kiali, flux-source-controller, kaniko, kubewatch, neuvector-sigstore-interface, ferretdb, flyte, opentelemetry-operator,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: trufflehog, flux-kustomize-controller, melange, kiali, flux-source-controller, flyte, step-issuer, kyverno-notation-aws, frp, steampipe, hydra, goreleaser, vault-benchmark, cosign, tflint, k3d, undock, rook, argo-workflows, tkn, grafana-mimir, oauth2-proxy,...

WordPress Events Manager plugin < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability

Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability discovered by Jakub Herman in WordPress Plugin Events Manager versions 7.4.1...

WordPress User Access Manager plugin < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST API vulnerability

Unauthenticated Restricted Content Disclosure via REST API vulnerability discovered by Farid Narimanov in WordPress Plugin User Access Manager versions 2.3.15...

CVE-2026-19629: Incorrect Authorization

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...

PT-2026-72057

Name of the Vulnerable Software and Affected Versions Tenable Security Center affected versions not specified Description A privilege escalation issue allows a user assigned the Security Manager role with the manage user permission for a specific group to modify users in different groups. This fl...

Linux Distros Unpatched Vulnerability : CVE-2026-73627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow ...

PT-2026-72121

Name of the Vulnerable Software and Affected Versions Semaphore versions prior to 2.18.20 Description An OS command injection issue exists in the handling of the repository git url variable. Authenticated users with Manager or Owner roles can achieve remote code execution on the server host by...

The vulnerability of the Siebel Approval Manager component of the Siebel CRM development system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information. This component is part of the Siebel CRM system, which handles customer relationship management.

The vulnerability of the Siebel Approval Manager component, a tool for configuring, customizing, and integrating CRM systems, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Deployment Library component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Deployment Library component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information by usin...