CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5. A patched version of the package is available...

CVE-2025-47911 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3

CVE-2025-47911 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3. A patched version of the package is available...

CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3

CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3. A patched version of the package is available...

CVE-2026-24283 Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

...

CVE-2026-24283

CVE-2026-24283 involves a local elevation-of-privilege in the UNC Provider Kernel Driver. The vulnerability is rated HIGH with CVSS 3.1: 8.8, impacting confidentiality, integrity, and availability at HIGH levels, exploitable with LOCAL attack vector and LOW complexity, requiring LOW privileges an...

CVE-2025-69219

A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low...

Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-service-operator, aws-load-balancer-controller, runc, cerbos, rook, prometheus-pushgateway, kyverno, karma, knative-operator, terraform-provider-pagerduty, gitness, gogatekeeper, tfsec, buildah, opentelemetry-collector-contrib,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-service-operator, aws-load-balancer-controller, runc, cerbos, rook, prometheus-pushgateway, kyverno, karma, knative-operator, terraform-provider-pagerduty, gitness, gogatekeeper, tfsec, buildah, opentelemetry-collector-contrib,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-aws-fips, argocd-image-updater, opencost, k6-operator, aws-flb-kinesis-fips, crossplane-provider-gitlab, rancher, terraform-provider-acme-fips, crossplane-provider-aws-efs-fips, aws-flb-firehose-fips, prometheus-pushgateway, longhorn-manager-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws-fips, argocd-image-updater, opencost, k6-operator, aws-flb-kinesis-fips, crossplane-provider-gitlab, kubeflow-pipelines, rabbitmq-default-user-credential-updater-fips, stakater-reloader, rancher, aws-otel-collector, node-feature-discovery,...

Hackers may have breached FBI wiretap network via supply chain

Investigators are worried that a recent attack on a critical FBI system was more than just a random hit, and that another nation-state might have been involved. On February 17, the FBI flagged irregular network activity that led straight to its Digital Collection System Network. That system...

Malicious Package

Overview @platform-growth/guidance-channel-provider is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

MAL-2026-1302 Malicious code in @platform-growth/guidance-channel-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851a1eb428b30069bd6ba251018b1547db4c6066228663539c2b80b07ba0061e The package @platform-growth/guidance-channel-provider was found to contain malicious code. Source: ghsa-malware...

CVE-2026-29792: Improper Authentication

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, an unauthenticated attacker can send a crafted GET request directly to /oauth/:provider/callback with a forged profile in the query string. The OAuth service's...

postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

A heap based buffer overflow flaw has been discovered in PostgreSQL. This Heap buffer overflow is in the pgcrypto component and allows a ciphertext provider to execute arbitrary code as the operating system user running the database...

postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

A heap based buffer overflow flaw has been discovered in PostgreSQL. This Heap buffer overflow is in the pgcrypto component and allows a ciphertext provider to execute arbitrary code as the operating system user running the database...

CVE-2025-11065 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26

CVE-2025-11065 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26. A patched version of the package is available...

CVE-2025-30204 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26

CVE-2025-30204 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26. A patched version of the package is available...

postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

A heap based buffer overflow flaw has been discovered in PostgreSQL. This Heap buffer overflow is in the pgcrypto component and allows a ciphertext provider to execute arbitrary code as the operating system user running the database...