GO-2025-3646 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2026-4471 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2025-4109 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

GO-2026-5047 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, bento, dapr, splunk-otel-collector...

GO-2023-2073 vulnerabilities

Vulnerabilities for packages: croc...

GO-2026-4312 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: argo-workflows, newrelic-fluent-bit-output, kubeflow-katib...

WordPress WooCommerce Subscriptions plugin < 9.1.0 - Unauthenticated RCE via PHP Object Injection vulnerability

Unauthenticated RCE via PHP Object Injection vulnerability discovered by Vasily Belolapotkov, Vlad Olaru in WordPress Plugin WooCommerce Subscriptions versions 9.1.0...

CVE-2026-73076

A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function. Mitigation Avoid installing or removing vimballs from untrusted sources. This vulnerability...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

Zoho ManageEngine - Remote Code Execution

Zoho ManageEngine Password Manager Pro, PAM 360, and Access Manager Plus are susceptible to unauthenticated remote code execution via XML-RPC. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary...

CVE-2026-66909

A flaw was found in Apache CXF. The Java Message Service JMS transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service's JMS destination. This vulnerability could lead ...

CVE-2026-19017 vulnerabilities

Vulnerabilities for packages: consul-fips...

GHSA-RWP8-HJ7G-QRH8 vulnerabilities

Vulnerabilities for packages: consul-fips...

GHSA-H928-JQXM-5F3X vulnerabilities

Vulnerabilities for packages: consul-fips...

EUVD-2026-58478

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

PT-2026-71999

Name of the Vulnerable Software and Affected Versions Grav API plugin versions prior to 1.0.13 Description Failure to enforce API key scope caps in ConfigController super-scope gates allows scoped keys to modify scheduler configuration. An attacker possessing a scoped api.config.write key can...

PT-2026-72046

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...