GHSA-49JC-R788-3FC9 vulnerabilities

Vulnerabilities for packages: cargo-audit...

GHSA-CX7H-H87R-JPGR vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2024-35197 vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2024-35186 vulnerabilities

Vulnerabilities for packages: cargo-audit...

GHSA-98P4-XJMM-8MFH vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2024-32884 vulnerabilities

Vulnerabilities for packages: cargo-audit...

GHSA-49JC-R788-3FC9 vulnerabilities

Vulnerabilities for packages: cargo-audit...

GHSA-7W47-3WG8-547C vulnerabilities

Vulnerabilities for packages: cargo-audit...

Important: Red Hat Security Advisory: Gatekeeper v3.17.2

Gatekeeper v3.17.2 Gatekeeper v3.17.2 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

WordPress WP Database Audit plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin WP Database Audit versions = 1.0...

VulnCheck KEV: CVE-2024-22120

Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection...

audit bug fix and enhancement update

An update is available for audit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

CVE-2025-2241

A flaw was found in Hive, a component of Multicluster Engine MCE and Advanced Cluster Management ACM. This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract...

CVE-2025-2271

A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference IDOR vulnerability in the Issuetrak audit component. The vulnerability enables unauthorized access to sensitive...

Arbitrary Command Injection

Overview k8s.io/kubernetes/pkg/kubelet is a package that contains the libraries that drive the Kubelet binary. The kubelet is responsible for node level pod management. It runs on each worker in the cluster. Affected versions of this package are vulnerable to Arbitrary Command Injection via the...

GO-2025-3510 Unintentional exposure of the workload identity token and client secret in logs in github.com/hashicorp/nomad

Unintentional exposure of the workload identity token and client secret in logs in github.com/hashicorp/nomad...

CVE-2025-2271

A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference IDOR vulnerability in the Issuetrak audit component. The vulnerability enables unauthorized access to sensitive...

CVE-2025-2271 IDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp

A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference IDOR vulnerability in the Issuetrak audit component. The vulnerability enables unauthorized access to sensitive...

CVE-2025-2271 IDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp

A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference IDOR vulnerability in the Issuetrak audit component. The vulnerability enables unauthorized access to sensitive...

CVE-2025-2271

Issuetrak v17.2.2 and earlier contain an Insecure Direct Object Reference (IDOR) in the audit component, enabling a low-privileged user to access audit results of other users and exposing sensitive information (user details, network/hardware info, installed programs, processes, drives, printers)....