114009 matches found
grafana security update
An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...
RLSA-2026:19185 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
RLSA-2026:19184 Important: grafana-pcp security update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For...
PT-2026-42381
Velocidex Velociraptor has an Incorrect Authorization issue in www.velocidex.com/golang/velociraptor...
PhoenixStorybook 安全漏洞
PhoenixStorybook is an open-source component display and interaction debugging UI tool developed by Phenix Digital. Versions of PhoenixStorybook from 0.4.0 to 1.1.0 contained security vulnerabilities. These vulnerabilities stemmed from bypassing authorization using user-controlled keys. Attackers...
WordPress plugin Boost SQL注入漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
RHCOS 4 : OpenShift Container Platform 4.17.54 (RHSA-2026:17595)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:17595 advisory. - golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 - golang: net/url: Memory exhaustion in quer...
Siber Systems RoboForm Password Manager 安全漏洞
Siber Systems RoboForm Password Manager is a password manager offered by Siber Systems. There is a security vulnerability in Siber Systems RoboForm Password Manager. This vulnerability arises from insufficient URL validation, user confirmation, or notification when processing Android intentions. ...
PT-2026-42177
Name of the Vulnerable Software and Affected Versions phoenix storybook versions 0.4.0 through 1.0.x Description An authorization bypass occurs due to user-controlled keys, allowing cross-session PubSub topic injection via a URL query parameter. The function handle params/3 in...
PT-2026-42252
Name of the Vulnerable Software and Affected Versions Open ISES Tickets versions prior to 3.44.2 Description A reflected cross-site scripting issue exists in the 'patient JF.php' endpoint. Authenticated attackers can inject arbitrary JavaScript by providing an unsanitized value through the ticket...
PT-2026-42375
Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes in github.com/gotenberg/gotenberg...
Talend Administration Center 安全漏洞
Talend Administration Center is a web-based application developed by Talend Corporation in the United States. It allows for centralized management of workspaces. There is a security vulnerability in Talend Administration Center, which stems from ineffective access control. This vulnerability may...
MAL-2026-4390 Malicious code in @flowselections/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28cf238827c035b4f3103aff9bf803421b7d16d1c7877d7e74c5fcd71f3283b The package exports a supabase client and LoginPage component wired to a hardcoded Supabase URL https://vmicscahrnzpmhagztmx.supabase.co and anon key...
CVE-2026-34463
creationtimestamp| type| source ---|---|--- 2026-05-19 23:12:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmajbsykj42o...
CVE-2025-15645
creationtimestamp| type| source ---|---|--- 2026-05-19 22:55:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaieiywiw2o...
CVE-2026-34246
creationtimestamp| type| source ---|---|--- 2026-05-19 22:43:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmahnryj5o2t...
CVE-2026-32882
creationtimestamp| type| source ---|---|--- 2026-05-19 22:37:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmahdobytv2e 2026-09-19 16:01:30+00:00| seen| https://gist.github.com/ichintu/5841827a4cd9286d1b1bda016e23c9f0 2026-09-19 21:00:33+00:00| exploited|...
CVE-2026-32741
creationtimestamp| type| source ---|---|--- 2026-05-19 22:34:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmah5txjp22k 2026-09-22 18:08:14+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mw4t233ejs2l...