GO-2026-4603 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, argocd-image-updater, undock, amazon-cloudwatch-agent-operator, cadvisor, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, step-kms-plugin, trino, podinfo, kuma, terraform-provider-azuread, crossplane-provider-aws-eks...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, dbmate, goreleaser, pdfcpu, trino, rabbitmq-cluster-operator, kuma, nri-nginx, slsa-verifier, grafana-alloy, k3d, haproxy-ingress, atlantis, spqr, otel-cli,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, sealed-secrets, crossplane-provider-aws-eks, atlantis, scorecard, sops, eksctl, argo-events, docker-machine-driver-linode,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: envconsul, cert-manager-istio-csr, undock, containerd, goreleaser, step-kms-plugin, slsa-verifier, grafana-alloy, neuvector-scanner, scorecard, jitsucom-bulker, bank-vaults, gogatekeeper, kiali, sops, opencost, octo-sts, harbor, grafana-mimir, kaniko, restic, grafana...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, fluxcd-kustomize-mutating-webhook, terraform, cert-manager-istio-csr, vault-k8s, vertical-pod-autoscaler, spark-operator, terraform-docs, undock, yace, amazon-cloudwatch-agent-operator, dbmate, crossplane-provider-aws-rds, goreleaser,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: terraform, envconsul, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, step-kms-plugin, chart-testing, portieris, wait-for-port, rabbitmq-cluster-operator, nri-nginx, grafana-alloy, aws-otel-collector, nri-apache, eksctl, argo-events,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, argocd-image-updater, undock, containerd, goreleaser, step-kms-plugin, grafana-alloy, neuvector-scanner, bank-vaults, kiali, sops, octo-sts, grafana-mimir, hydra, podman, spire-server, argo-workflows, tekton-chains, melange, step-ca, rekor,...

GO-2025-3487 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, terraform, cert-manager-istio-csr, spark-operator, argocd-image-updater, terraform-docs, undock, amazon-cloudwatch-agent-operator, cadvisor, containerd, crossplane-provider-aws-rds, dbmate, goreleaser, pulumi-kubernetes-operator,...

WordPress Events Manager plugin < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability

Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability discovered by Jakub Herman in WordPress Plugin Events Manager versions 7.4.1...

WordPress User Access Manager plugin < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST API vulnerability

Unauthenticated Restricted Content Disclosure via REST API vulnerability discovered by Farid Narimanov in WordPress Plugin User Access Manager versions 2.3.15...

CVE-2026-19629: Incorrect Authorization

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information by using t...

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2026-72057

Name of the Vulnerable Software and Affected Versions Tenable Security Center affected versions not specified Description A privilege escalation issue allows a user assigned the Security Manager role with the manage user permission for a specific group to modify users in different groups. This fl...

Linux Distros Unpatched Vulnerability : CVE-2026-73416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.0 until 4.5.10 and 4.6....

Linux Distros Unpatched Vulnerability : CVE-2026-73627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow ...

The vulnerability of the Windows License Manager, a system for managing Windows operating systems, allows attackers to increase their privileges.

The vulnerability of the Windows License Manager for operating systems involves a lack of authentication for a critical function. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Siebel Approval Manager component of the Siebel CRM development system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information. This component is part of the Siebel CRM system, which handles customer relationship management.

The vulnerability of the Siebel Approval Manager component, a tool for configuring, customizing, and integrating CRM systems, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the Deployment Library component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Deployment Library component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information by usin...

The vulnerability of the Self Update Framework component of the Oracle Enterprise Manager Base Platform allows a perpetrator to gain full control over the application.

The vulnerability of the Self Update Framework component of the Oracle Enterprise Manager Base Platform software is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTPS...