GO-2026-5848 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester, docker-machine-driver-harvester...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: nats-fips, argo-cd, eks-distro-fips, splunk-otel-collector-fips, keda, opentelemetry-collector-contrib-fips, kserve, argo-cd-fips, argo-rollouts-fips, datadog-agent, elastic-agent, kine, k8sgateway-fips, opentelemetry-collector-contrib, coredns, k8sgpt, grafana-alloy...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: dask-gateway, mockgen, fluent-operator-fips, policy-controller-fips, gcsfuse, yunikorn-web, skopeo, capslock, crossplane-function-auto-ready-fips, custom-pod-autoscaler-fips, iptables-wrappers, kubecolor, kyverno-notation-aws-fips, harbor, cloud-provider-aws,...

GO-2024-3005 vulnerabilities

Vulnerabilities for packages: syft, kots, policy-controller-fips, opentelemetry-collector-contrib, melange, buf, helm-fips, neuvector-sigstore-interface, trivy, grafana-alloy, skopeo, crossplane, buildkitd, scorecard, harbor, goreleaser, traefik-fips, ko, policy-controller, kubeflow-katib, aactl,...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: tempo, k8sgpt, prometheus-pushgateway, keda, metrics-server, istio, minio, minio-object-browser, amazon-cloudwatch-agent-operator, opentelemetry-collector, trillian, mcp-grafana, loki, minio-operator, opentelemetry-collector-contrib, datadog-agent,...

DEBIAN-CVE-2026-66021

Bulletin has no description...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

xss2shell-pro

XSS2Shell PRO v4.0 — WordPress XSS→RCE Automated Testing Platf...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

DEBIAN-CVE-2026-53791

rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...

CVE-2026-63424

During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges...

ECHO-4F46-4DDD-9DFD

Bulletin has no description...

CVE-2026-71194

creationtimestamp| type| source ---|---|--- 2026-08-13 10:21:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-71194...

PT-2026-71554

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

CGA-6J7X-XXJ6-VQ4V

Bulletin has no description...

CVE-2026-67558

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/66wymlkohacrk...

CVE-2026-62738

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:51+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:21:46+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:48+00:00| seen|...

Oracle Linux 9 : ruby:3.3 (ELSA-2026-50828)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50828 advisory. ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 rubygem-mysql2 0.5.5-3 - Disable tests on the 32bit platforms ix86...

Medixant RadiAnt DICOM

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...