144 matches found
[SECURITY] Fedora 45 Update: ocaml-ppx-stable-witness-0.17.0-17.fc45
Ppxstablewitnesss is a ppx extension for deriving a witness that a type is intended to be stable. In this context, stable means that the serialization format will never change. This allows programs running at different versions of the code to communicate safely...
CVE-2026-78414
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414
A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...
CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
EUVD-2026-64898
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
PT-2026-80899
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: docker, gitaly, runc, hubble-ui, witness, containerd, cilium, nerdctl, vitess, kubescape-operator, k3s, splunk-otel-collector, hubble, kubescape, kuma, delve, falcoctl...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: docker, gitaly, runc, hubble-ui, witness, containerd, cilium, nerdctl, vitess, kubescape-operator, k3s, splunk-otel-collector, hubble, kubescape, kuma, delve, falcoctl...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: docker, gitaly, runc, hubble-ui, witness, containerd, cilium, nerdctl, vitess, kubescape-operator, k3s, splunk-otel-collector, hubble, kubescape, kuma, delve, falcoctl...
GO-2026-4309 vulnerabilities
Vulnerabilities for packages: falcoctl, witness, aactl, kyverno-fips, policy-controller-fips, teleport, chainctl, gitsign, image-factory-fips, kyverno-policy-reporter-plugins-kyverno, ratify-fips, kyverno-notation-aws, tkn-fips, goreleaser, kyverno, tkn, policy-controller, ratify,...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, witness, trivy, spire-server, policy-controller, kots, tfsec, cosign, conftest...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, witness, grafana, dgraph, k3s, grafana-alloy, k8sgpt, rclone, terragrunt, terraform-mcp-server, dagger, weaviate, gitlab-runner, malcontent, redpanda, cri-tools, ollama, loki, datadog-agent, nuclei, vcluster, nfpm, eksctl, lazygit,...
GO-2026-4377 vulnerabilities
Vulnerabilities for packages: witness, skaffold, policy-controller, buildkitd, kubescape, tflint, gh, docker, sigstore-scaffolding, tkn, tekton-chains, spire-server, vexctl, zarf, zot, cosign, gitsign, falcoctl, ko, trivy-operator, flux-source-controller, neuvector-sigstore-interface,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: gptscript, syft, witness, gomplate, pulumi-kubernetes-operator, skaffold, src-fingerprint, grafana-alloy, kubescape, kots, kyverno, kaniko, chezmoi, dagger, bom, gitlab-runner, wolfictl, pulumi, guac, pulumi-language-dotnet, scorecard, osv-scanner, argo-cd,...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: skopeo, kyverno-notation-aws, tekton-chains, witness, undock, gitsign, kyverno, buildah, ratify, podman, kubescape, zarf, kots, slsa-verifier, aactl, falco-no-driver, flux-source-controller, falcoctl...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: gptscript, kubernetes-dashboard, flux-kustomize-controller, policy-controller, podman, terragrunt, crossplane-provider-aws-kms, gh, gitlab-runner, traefik, chisel, containerd, atlantis, scorecard, kine, osv-scanner, zot, falcoctl, crossplane-provider-aws-sqs,...
GO-2025-4193 vulnerabilities
Vulnerabilities for packages: witness, buildah, ratify, podman, kubescape, kots, falco-no-driver, sigstore-scaffolding, tkn, portieris, tekton-chains, undock, vexctl, zarf, cosign, gitsign, falcoctl, skopeo, slsa-verifier, flux-source-controller, kyverno-notation-aws, aactl...