11768 matches found
TileServer API - Cross Site Scripting
tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key. id: CVE-2024-35627 info: name: TileServer API - Cross Site Scripting author: DhiyaneshDK severity: medium description: | tileserver-gl up to v4.4.10 was discovered to...
Cost Calculator Builder <= 3.2.15 - SQL Injection
The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2026-19927 OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery
A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groovy of the component Product Upload Endpoint. Performing a manipulation of the argument params.url results in server-si...
EUVD-2026-59106
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata1: ERR050531: VPUNOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling. Description: VC8000E reset de-assertion edge and AXI clock may have a...
PT-2026-72557
In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minix check superblock uses minix blocks needed to verify that the on-disk imap and zmap block counts are large enough for the advertised inode and zone counts. The helper...
CVE-2026-19835 Webkul Bagisto Customer Item Deletion Endpoint access control
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit is publicly available an...
GO-2023-2048 vulnerabilities
Vulnerabilities for packages: ctop, up, k3s...
GO-2024-2554 vulnerabilities
Vulnerabilities for packages: kots, helm-push, trivy, up, eksctl, cilium-cli, zarf, kubescape, kubevela, k9s, flux-helm-controller, k8sgpt, flux-source-controller, helm-operator, chartmuseum, zot...
GO-2024-2575 vulnerabilities
Vulnerabilities for packages: kots, helm-push, trivy, up, eksctl, cilium-cli, zarf, kubescape, kubevela, k9s, flux-helm-controller, k8sgpt, flux-source-controller, helm-operator, chartmuseum, zot...
GO-2023-1701 vulnerabilities
Vulnerabilities for packages: melange, apko, bom, ctop, up, helm, ko...
GO-2023-1700 vulnerabilities
Vulnerabilities for packages: melange, apko, bom, ctop, up, helm, ko...
GO-2023-1699 vulnerabilities
Vulnerabilities for packages: melange, apko, bom, ctop, up, helm, ko...
GO-2023-2048 vulnerabilities
Vulnerabilities for packages: up, k3s, ctop...
GO-2024-2554 vulnerabilities
Vulnerabilities for packages: helm-push, zot, kots, kubevela, helm-operator, flux-source-controller, chartmuseum, cilium-cli, eksctl, k8sgpt, trivy, up, flux-helm-controller, kubescape, zarf, k9s...
GO-2024-2575 vulnerabilities
Vulnerabilities for packages: helm-push, zot, kots, kubevela, helm-operator, flux-source-controller, chartmuseum, cilium-cli, eksctl, k8sgpt, trivy, up, flux-helm-controller, kubescape, zarf, k9s...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: helm-push, melange, zot, eksctl, grype, newrelic-infrastructure-agent, kubevela, flux-source-controller, k8sgpt, fuse-overlayfs-snapshotter, kubescape, kaniko, ctop, k3d, buildkitd, trivy, flux-helm-controller, skaffold, gitness, kots, up, cilium-cli, helm...
GO-2023-2113 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, kubevela, up, buildkitd, kubernetes, k3s, caddy...
GO-2023-1699 vulnerabilities
Vulnerabilities for packages: ko, melange, up, apko, bom, ctop, helm...