Windows Kerberos Elevation of Privilege Vulnerability

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-60704: Missing Cryptographic Step

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

DRUPAL-CONTRIB-2025-116

This module provides the ability to convert any entity form into a simple multi-step form. The module doesn’t sufficiently filter certain user-provided text leading to a cross-site scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the...

Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116

This module provides the ability to convert any entity form into a simple multi-step form. The module doesn’t sufficiently filter certain user-provided text leading to a cross-site scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the...

Drupal Simple multi step form module < 2.0.0 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Ide Braakman idebr in WordPress Module Simple multi step form versions 2.0.0...

JLSEC-2025-197 GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a...

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, velero, terraform-provider-azapi, spire-controller-manager, scorecard, kube-vip-cloud-provider, grpcurl, bank-vaults, fixuid, licenseclassifier, spegel, cadvisor, cargobump, kube-logging-operator-custom-runner, terraform-provider-tls, falco-exporter,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism,...