132 matches found
CVE-2026-78414
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414
A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...
EUVD-2026-64898
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
PT-2026-80899
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: witness, kubescape-operator, kuma, runc, k3s, cilium, kubescape, vitess, nerdctl, hubble, hubble-ui, docker, falcoctl, splunk-otel-collector, delve, containerd, gitaly...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: witness, kubescape-operator, kuma, runc, k3s, cilium, kubescape, vitess, nerdctl, hubble, hubble-ui, docker, falcoctl, splunk-otel-collector, delve, containerd, gitaly...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: witness, kubescape-operator, kuma, runc, k3s, cilium, kubescape, vitess, nerdctl, hubble, hubble-ui, docker, falcoctl, splunk-otel-collector, delve, containerd, gitaly...
GO-2026-4309 vulnerabilities
Vulnerabilities for packages: cloudbeat, policy-controller-fips, falcoctl-fips, kyverno-notation-aws, tkn, policy-controller, tkn-fips, ratify-fips, gitsign, witness, cloudbeat-fips, kyverno-policy-reporter-plugins-kyverno, aactl, flux-source-controller, kyverno, goreleaser, falcoctl, zot,...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: vcluster, witness, kubevela, maru, terraform-mcp-server, minio, grafana, nuclei, rclone, teleport, datadog-agent, ollama, cri-tools, gitlab-runner, malcontent, k8sgpt, grafana-alloy, goreleaser, opentelemetry-collector, terragrunt, eksctl, dagger, redpanda, weaviate,...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: witness, policy-controller, kots, trivy, cosign, tfsec, spire-server, conftest, kyverno-notation-aws...
GO-2026-4377 vulnerabilities
Vulnerabilities for packages: witness, policy-controller, kubescape, trivy, zot, spire-server, zarf, docker, gh, trivy-operator, vexctl, cosign, sigstore-scaffolding, teleport, kyverno-notation-aws, tekton-chains, falcoctl, goreleaser, ko, tkn, gitsign, buildkitd, crossplane,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: argo-cd, gomplate, snyk-cli, witness, kots, kubescape, bom, trivy, zot, pulumi, steampipe, kubevela, zarf, src-fingerprint, chezmoi, trufflehog, gptscript, syft, k9s, trivy-operator, nuclei, flux, tfsec, flux-image-automation-controller, gitea, melange, teleport,...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: witness, podman, kots, kubescape, skopeo, buildah, kyverno, slsa-verifier, tekton-chains, aactl, flux-source-controller, zarf, falcoctl, undock, ratify, kyverno-notation-aws, gitsign...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: snyk-cli, pulumi, rancher, glab, docker, crossplane-provider-aws-cloudwatchlogs, chezmoi, flux-notification-controller, minio, cilium, cloudflared, crossplane-provider-aws-elasticache, kubernetes-dashboard, act, crossplane-provider-aws-cloudfront, nerdctl,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: witness, policy-controller, kubescape, zot, spire-server, zarf, gh, vexctl, cosign, sigstore-scaffolding, teleport, kyverno-notation-aws, docker-cli-buildx, tekton-chains, aactl, falcoctl, goreleaser, ko, tkn, ratify, gitsign, crossplane, neuvector-sigstore-interface...
GO-2025-4193 vulnerabilities
Vulnerabilities for packages: witness, kots, kubescape, buildah, zarf, falco-no-driver, vexctl, cosign, sigstore-scaffolding, portieris, undock, kyverno-notation-aws, podman, skopeo, slsa-verifier, tekton-chains, aactl, falcoctl, tkn, ratify, gitsign, kyverno, flux-source-controller...
GO-2026-4358 vulnerabilities
Vulnerabilities for packages: witness, policy-controller, kots, kubescape, trivy, buildah, zot, spire-server, zarf, gh, rekor, trivy-operator, falco-no-driver, vexctl, timestamp-authority, cosign, sigstore-scaffolding, portieris, undock, kyverno-notation-aws, fulcio, guac, podman, skopeo, xeol,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: witness, policy-controller, kubescape, trivy, zot, spire-server, zarf, docker, gh, trivy-operator, vexctl, cosign, sigstore-scaffolding, teleport, kyverno-notation-aws, docker-cli-buildx, slsa-verifier, tekton-chains, aactl, falcoctl, goreleaser, ko, tkn, ratify,...