2174 matches found
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: dockerize, velero, terraform-provider-azapi, nova, kubernetes-event-exporter, xcaddy, infinispan-operator, ko, shfmt, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, doppler-kubernetes-operator, aws-sigv4-proxy, extism, wazero,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: spark-operator, stakater-reloader-fips, mongodb-kubernetes-operator-fips, prometheus-statsd-exporter, rancher-loglevel, logstash-exporter, prometheus-node-exporter, wireguard-go, vendir-fips, dagdotdev, kubevela-fips, azuredisk-csi-fips, gobuster, cephcsi-fips,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: spark-operator, stakater-reloader-fips, mongodb-kubernetes-operator-fips, prometheus-statsd-exporter, rancher-loglevel, logstash-exporter, prometheus-node-exporter, wireguard-go, vendir-fips, dagdotdev, kubevela-fips, azuredisk-csi-fips, gobuster, cephcsi-fips,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: spark-operator, stakater-reloader-fips, mongodb-kubernetes-operator-fips, prometheus-statsd-exporter, rancher-loglevel, logstash-exporter, prometheus-node-exporter, wireguard-go, vendir-fips, dagdotdev, kubevela-fips, azuredisk-csi-fips, gobuster, cephcsi-fips,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: spark-operator, stakater-reloader-fips, mongodb-kubernetes-operator-fips, prometheus-statsd-exporter, rancher-loglevel, logstash-exporter, prometheus-node-exporter, wireguard-go, vendir-fips, dagdotdev, kubevela-fips, azuredisk-csi-fips, gobuster, cephcsi-fips,...
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: spark-operator, stakater-reloader-fips, mongodb-kubernetes-operator-fips, prometheus-statsd-exporter, rancher-loglevel, logstash-exporter, prometheus-node-exporter, wireguard-go, vendir-fips, dagdotdev, kubevela-fips, azuredisk-csi-fips, gobuster, cephcsi-fips,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: spark-operator, stakater-reloader-fips, mongodb-kubernetes-operator-fips, prometheus-statsd-exporter, rancher-loglevel, logstash-exporter, prometheus-node-exporter, wireguard-go, vendir-fips, dagdotdev, kubevela-fips, azuredisk-csi-fips, gobuster, cephcsi-fips,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: spark-operator, stakater-reloader-fips, mongodb-kubernetes-operator-fips, prometheus-statsd-exporter, rancher-loglevel, logstash-exporter, prometheus-node-exporter, wireguard-go, vendir-fips, dagdotdev, kubevela-fips, azuredisk-csi-fips, gobuster, cephcsi-fips,...
net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
...
Jenkins JDepend Plugin vulnerable to XML external entity attacks
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file...
XXE vulnerability in jdepend
jdepend 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file that uses extern...
GHSA-X6FH-7QMF-69XH vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca, caddy, step...
CVE-2025-62820 vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca, caddy, step...
CVE-2025-62820 vulnerabilities
Vulnerabilities for packages: step-issuer, step, caddy-fips, step-issuer-fips, caddy, step-fips, step-ca-fips, step-ca...
GHSA-X6FH-7QMF-69XH vulnerabilities
Vulnerabilities for packages: step-issuer, step, caddy-fips, step-issuer-fips, caddy, step-fips, step-ca-fips, step-ca...
CVE-2025-10861
CVE-2025-10861: Unauthenticated SSRF in the WordPress plugin “Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers” affecting versions up to and including 2.1.4 due to insufficient URL validation. Exploitation could allow the server to make requests t...
CVE-2025-57240
Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...
CVE-2025-10861: Server-Side Request Forgery (SSRF)
The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.1.4. This is due to insufficient validation on the URLs supplied via the URL parameter...
