13277 matches found
CVE-2018-4878-
-cms 服务器集群批量识别cms,批量找备份，批量注入。VIP群版备份...
CVE-2026-36438
CVE-2026-36438: Información sensible a través del restablecimiento de contraseña Las versiones anteriores a la 6 del Intelbras VIP 1230 B/D G4 permiten que un atacante remoto obtenga información sensible de la cuenta de administrador a través de la funcionalidad de restablecimiento de contraseña ...
CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10
CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...
CVE-2026-83530 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10
CVE-2026-83530 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...
CVE-2026-37236 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10
CVE-2026-37236 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. A patched version of the package is available...
CLEANSTART-2025-IS89195 Security fix for ghsa-hqhq-hp5x-xp3w applied in: kube-vip-fips 0.7.2-r0
Security vulnerability affects the kube-vip-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-HU02561 Security fix for CVE-2026-49838 applied in: kube-vip 1.2.1-r0
Security vulnerability affects the kube-vip package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-89875: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is detected, and the list-complete path looks the stream up through the VPDM...
AZL-100935 CVE-2026-83530 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...
AZL-99246 CVE-2026-84304 affecting package kube-vip-cloud-provider 0.0.10-8
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...
AZL-98376 CVE-2026-37236 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: telegraf, openfga, cluster-api-ipam-provider-in-cluster, kyverno-notation-aws, kubernetes, rancher-agent, datadog-agent, metallb, flux-kustomize-controller, cluster-api-gcp-controller, kuma, rancher-system-agent, cluster-api-azure-controller,...
CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8
CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8. A patched version of the package is available...
GO-2026-5954 vulnerabilities
Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...
GO-2026-4736 vulnerabilities
Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...
GO-2026-5954 vulnerabilities
Vulnerabilities for packages: cilium-cli, kube-vip...
GO-2026-4736 vulnerabilities
Vulnerabilities for packages: cilium-cli, kube-vip...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-elasticache, maru, crossplane-provider-aws-sns, cluster-api-gcp-controller, kube-bench, kuma, mesosphere-vsphere-csi, nerdctl, postgres-operator, rancher-system-agent, redis-operator, clickhouse-operator, newrelic-fluent-bit-output, blobfuse2,...