Lucene search
+L

4888 matches found

CVE
CVE
added 2026/07/14 8:19 p.m.59 views

CVE-2026-15738

The CVE-2026-15738 issue affects the AWS Load Balancer Controller prior to version 3.4.2, where incorrect behavior order in Gateway API listener-rule generation can let an authenticated remote user intercept, spoof, or deny another namespace’s gRPC traffic on a shared Gateway via a crafted HTTPRo...

8.5CVSS6.2AI score0.00373EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/14 8:19 p.m.10 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the server process. An attacker can access sensitive local files by connecting to the server over the network and issuing queries that create virtual tables referencing arbitrary file paths. Remediation Upgrade...

8.7CVSS6.2AI score
SaveExploits0References6
OSV
OSV
added 2026/07/14 10:35 a.m.6 views

MAL-2026-10578 Malicious code in @sqlite-group/sql-creator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3bd76c01604d26251c1650c71f8a99ad32c5389c4e42795477ae660be33a2a The package is published under a scope that impersonates SQLite @sqlite-group and declares itself as "cloud definitions for node", but the shipped...

6.4AI score
SaveExploits0References2
OSV
OSV
added 2026/07/14 8:44 a.m.9 views

BIT-HUBBLE-RELAY-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/14 8:41 a.m.9 views

BIT-CILIUM-OPERATOR-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/14 8:41 a.m.6 views

BIT-CILIUM-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/14 6:17 a.m.15 views

MAL-2026-10571 Malicious code in @wrenfield/viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa26048a977a00adcd1ffc42ccf06110e3807bb2a3145a01fd01318dcfe79771 Package @wrenfield/viem impersonates the popular viem library homepage viem.sh, repo wevm/viem; README and authors fields credit the real viem...

6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/14 6:17 a.m.26 views

Malicious code in @wrenfield/viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef631151a9f361646ced489dc5cc912a455332dee753090cdb89b94ba74f2f7 @wrenfield/viem republishes the viem codebase under an unrelated npm scope while keeping the upstream homepage https://viem.sh and repository wevm/vi...

5.7AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/14 6:9 a.m.9 views

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...

7.8CVSS6.3AI score0.00148EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/14 4:35 a.m.8 views

MAL-2026-10550 Malicious code in better-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302c3b7766a431cefe81d41434fd4c5aae74aacec230488bd004eca18cbe8dff The package publishes under the name of the legitimate better-tailwindcss project but its package.json declares both a runtime and dev dependency on...

6.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.16 views

PT-2026-60111

Name of the Vulnerable Software and Affected Versions Woodpecker CI versions v1.0.0 through v3.15.0 Description A privilege escalation issue exists in instances using the Kubernetes backend. The pipeline option backend options.kubernetes.serviceAccountName is passed directly to the pod spec witho...

8.2CVSS6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58008

A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua client connect.c of the component Shared Client Library. Such manipulation of the argument Server NamespaceArray leads to null pointer dereference...

3.1CVSS5.6AI score0.00269EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.19 views

PT-2026-58726

Name of the Vulnerable Software and Affected Versions Amazon AWS Load Balancer Controller versions prior to 3.4.2 Description An issue exists in the Gateway API listener-rule generation where rules are ordered by route type rather than specificity when an HTTPRoute and GRPCRoute share an ALB...

8.5CVSS6.1AI score0.00373EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.10 views

PT-2026-58914

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58897

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.7 views

PT-2026-58898

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/13 9:31 p.m.9 views

MAL-2026-10500 Malicious code in express-bunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68139b9a62e1d546de6ce2e46d5203782dbf54f1af2edbd2b8f509528eb0f000 [email protected] ships a postinstall script that performs an HTTP GET to a hardcoded bare IP over plain HTTP...

6.2AI score
SaveExploits0References1
OSV
OSV
added 2026/07/13 7:34 p.m.9 views

MAL-2026-10472 Malicious code in @torbeck/priority-queue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3109ebd719fa91812bd69e50b418b78f2a04c5478924f6ff53054cb798dc937 The package republishes @datastructures-js/priority-queue verbatim — identical README pointing to datastructures-js.info, the original author 'Eyas...

6.1AI score
SaveExploits0References3
CVE
CVE
added 2026/07/13 12:1 p.m.37 views

CVE-2026-15584

The CVE-2026-15584 issue concerns the incluster-checks tool in OpenShift. It describes a privilege-escalation flaw where the tool creates privileged debug pods with host filesystem access in the shared default namespace. Any user possessing the standard edit role can execute into these pods and o...

7.5CVSS6AI score0.00246EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/13 12:1 p.m.9 views

CVE-2026-15584

A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes...

7.5CVSS6AI score0.00246EPSS
SaveExploits0References3
Rows per page
Query Builder