Lucene search
+L

4893 matches found

Positive Technologies
Positive Technologies
added 2026/07/15 12:0 a.m.21 views

PT-2026-60387

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c...

9.9CVSS6.7AI score0.03082EPSS
SaveExploits10
NVD
NVD
added 2026/07/14 9:16 p.m.7 views

CVE-2026-15738

Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this...

8.5CVSS0.00373EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/14 8:29 p.m.5 views

GHSA-QF34-295C-26V8 Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend

Impact A privilege escalation vulnerability affects Woodpecker instances using the Kubernetes backend. The pipeline option backendoptions.kubernetes.serviceAccountName was passed directly to the pod spec without any admin gating. Who is impacted: any operator running the Kubernetes backend. Any...

8.2CVSS6.2AI score
SaveExploits0References3
OSV
OSV
added 2026/07/14 8:19 p.m.8 views

CVE-2026-15738 Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller

Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this...

5.8CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/14 8:19 p.m.44 views

CVE-2026-15738 Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller

Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this...

8.5CVSS0.00373EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/14 8:19 p.m.59 views

CVE-2026-15738

The CVE-2026-15738 issue affects the AWS Load Balancer Controller prior to version 3.4.2, where incorrect behavior order in Gateway API listener-rule generation can let an authenticated remote user intercept, spoof, or deny another namespace’s gRPC traffic on a shared Gateway via a crafted HTTPRo...

8.5CVSS6.2AI score0.00373EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/14 8:19 p.m.10 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the server process. An attacker can access sensitive local files by connecting to the server over the network and issuing queries that create virtual tables referencing arbitrary file paths. Remediation Upgrade...

8.7CVSS6.2AI score
SaveExploits0References6
OSV
OSV
added 2026/07/14 10:35 a.m.6 views

MAL-2026-10578 Malicious code in @sqlite-group/sql-creator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3bd76c01604d26251c1650c71f8a99ad32c5389c4e42795477ae660be33a2a The package is published under a scope that impersonates SQLite @sqlite-group and declares itself as "cloud definitions for node", but the shipped...

6.4AI score
SaveExploits0References2
OSV
OSV
added 2026/07/14 8:44 a.m.9 views

BIT-HUBBLE-RELAY-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/14 8:41 a.m.9 views

BIT-CILIUM-OPERATOR-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/14 8:41 a.m.6 views

BIT-CILIUM-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/14 6:17 a.m.26 views

Malicious code in @wrenfield/viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef631151a9f361646ced489dc5cc912a455332dee753090cdb89b94ba74f2f7 @wrenfield/viem republishes the viem codebase under an unrelated npm scope while keeping the upstream homepage https://viem.sh and repository wevm/vi...

5.7AI score
SaveExploits0References5
OSV
OSV
added 2026/07/14 6:17 a.m.15 views

MAL-2026-10571 Malicious code in @wrenfield/viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef631151a9f361646ced489dc5cc912a455332dee753090cdb89b94ba74f2f7 @wrenfield/viem republishes the viem codebase under an unrelated npm scope while keeping the upstream homepage https://viem.sh and repository wevm/vi...

5.7AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/14 6:9 a.m.9 views

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...

7.8CVSS6.3AI score0.00148EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/14 4:35 a.m.8 views

MAL-2026-10550 Malicious code in better-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302c3b7766a431cefe81d41434fd4c5aae74aacec230488bd004eca18cbe8dff The package publishes under the name of the legitimate better-tailwindcss project but its package.json declares both a runtime and dev dependency on...

6.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.16 views

PT-2026-60111

Name of the Vulnerable Software and Affected Versions Woodpecker CI versions v1.0.0 through v3.15.0 Description A privilege escalation issue exists in instances using the Kubernetes backend. The pipeline option backend options.kubernetes.serviceAccountName is passed directly to the pod spec witho...

8.2CVSS6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58008

A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua client connect.c of the component Shared Client Library. Such manipulation of the argument Server NamespaceArray leads to null pointer dereference...

3.1CVSS5.6AI score0.00269EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.19 views

PT-2026-58726

Name of the Vulnerable Software and Affected Versions Amazon AWS Load Balancer Controller versions prior to 3.4.2 Description An issue exists in the Gateway API listener-rule generation where rules are ordered by route type rather than specificity when an HTTPRoute and GRPCRoute share an ALB...

8.5CVSS6.1AI score0.00373EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.10 views

PT-2026-58914

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58897

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.00211EPSS
SaveExploits0References9
Rows per page
Query Builder