GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: logstash, opensearch, spdx-tools-java, apache-nifi-registry, keycloak-config-cli, druid, strimzi-kafka-operator, infinispan, scala, apache-tika, apache-nifi, akhq, sonarqube, cass-config-builder, trino, flyway, wildfly, apicurio-registry, keycloak, dependency-track,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: logstash, opensearch, spdx-tools-java, apache-nifi-registry, keycloak-config-cli, druid, strimzi-kafka-operator, infinispan, scala, apache-tika, apache-nifi, akhq, sonarqube, cass-config-builder, trino, flyway, wildfly, apicurio-registry, keycloak, dependency-track,...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: flyway-fips, solr, cruise-control, apache-pulsar-fips, jenkins-plugin-manager, floci-az, mongodb-search-fips, ontop, gradle, knative-kafka-broker, cass-config-builder-fips, neo4j, ontop-fips, strimzi-kafka-oauth-fips, apicurio-registry-fips, reposilite,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: flyway-fips, solr, cruise-control, apache-pulsar-fips, jenkins-plugin-manager, floci-az, mongodb-search-fips, ontop, gradle, knative-kafka-broker, cass-config-builder-fips, neo4j, ontop-fips, strimzi-kafka-oauth-fips, apicurio-registry-fips, reposilite,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: flyway-fips, solr, cruise-control, apache-pulsar-fips, jenkins-plugin-manager, floci-az, mongodb-search-fips, ontop, gradle, knative-kafka-broker, cass-config-builder-fips, neo4j, ontop-fips, strimzi-kafka-oauth-fips, apicurio-registry-fips, reposilite,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: flyway-fips, solr, cruise-control, apache-pulsar-fips, jenkins-plugin-manager, floci-az, mongodb-search-fips, ontop, gradle, knative-kafka-broker, cass-config-builder-fips, neo4j, ontop-fips, strimzi-kafka-oauth-fips, apicurio-registry-fips, reposilite,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: logstash, opensearch, spdx-tools-java, keycloak-config-cli, strimzi-kafka-operator, cassandra, management-api-for-apache-cassandra-5.0, jenkins-plugin-manager, wavefront-proxy, cassandra-reaper, akhq, cass-config-builder, strimzi-kafka-oauth, wildfly, thingsboard,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: logstash, opensearch, spdx-tools-java, keycloak-config-cli, strimzi-kafka-operator, cassandra, management-api-for-apache-cassandra-5.0, jenkins-plugin-manager, wavefront-proxy, cassandra-reaper, akhq, cass-config-builder, strimzi-kafka-oauth, wildfly, thingsboard,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: logstash, opensearch, spdx-tools-java, keycloak-config-cli, strimzi-kafka-operator, cassandra, management-api-for-apache-cassandra-5.0, jenkins-plugin-manager, wavefront-proxy, cassandra-reaper, akhq, cass-config-builder, strimzi-kafka-oauth, wildfly, thingsboard,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: logstash, opensearch, spdx-tools-java, keycloak-config-cli, strimzi-kafka-operator, cassandra, management-api-for-apache-cassandra-5.0, jenkins-plugin-manager, wavefront-proxy, cassandra-reaper, akhq, cass-config-builder, strimzi-kafka-oauth, wildfly, thingsboard,...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: kubescape-operator, hubble, kubescape, cilium, hubble-ui...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: tigera-operator, kyverno-notation-aws, gitness, maru, kube-arangodb, cert-manager-cmctl, xeol, opentofu, flux-helm-controller, k8sgpt, manifest-tool, helm-set-status, rancher-helm, kargo, k9s, helm-push, helm-mapkubeapis, cluster-api-helm-controller...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: tigera-operator, kyverno-notation-aws, gitness, maru, kube-arangodb, cert-manager-cmctl, xeol, opentofu, flux-helm-controller, k8sgpt, manifest-tool, helm-set-status, rancher-helm, kargo, k9s, helm-push, helm-mapkubeapis, cluster-api-helm-controller...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher, newrelic-infrastructure-agent, kube-arangodb, k9s, xeol, scorecard, zarf, docker-cli-buildx, kaniko, gatekeeper, falco-no-driver, helm-push, rancher-agent, headlamp, helm-operator, tigera-operator, zot, k8sgpt, trivy-operator, helm-set-status,...

EUVD-2026-91803

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055

The postgresql-operator charm contains a vulnerability where the Prometheus postgres_exporter writes the monitoring user's password in cleartext to its logs during database connection errors. An attacker with log-reading permissions can recover this password to gain read-only pg_monitor access to...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

cdn-ip-scanner

CDN IP Scanner V2.0 高精度 • 超高速 • AI搭載 English • فارسی • Download • Donate 🇬🇧 English CDN IP Scannerとは？ CDN IP Scanner は、最速のCDN（コンテンツ配信ネットワーク）IPアドレスをスキャンして見つけるための強力なWebベースのツールです。Cloudflare 、Fastly 、その他のCDNネットワークなどのプロバイダーから、クリーンで低遅延のIPを発見するのに役立ちます。 このスキャナーは、/cdn-cgi/trace エンドポイントチェックを伴う実績のある5回試行検証方式...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – 通过查询构造导致 SQLite FTS3 匹配信息泄漏 程序代码（Python） sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content TEXT" conn.execute"INSERT INTO secrets VALUES 'admin:password123'"...