5564 matches found
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: thanos, cortex, cosign, flyte, rclone, kubescape, guac, zarf, timestamp-authority, sigstore-scaffolding, flux-kustomize-controller, falcoctl, druid, bank-vaults, sqlpad, fulcio, restic, py3-cassandra-medusa, sops, trino, zot, tkn, hugo-extended, pulumi,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: flux-notification-controller, flux-image-automation-controller, crossplane-provider-azure-storage, k3d, rabbitmq-messaging-topology-operator, kubevela, kubernetes-event-exporter, cosign, vexctl, kubescape, guac, zarf, timestamp-authority, actions-runner-controller,...
CVE-2026-18101
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper management of thread authority swaps...
EUVD-2026-58466
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper management of thread authority swaps...
CVE-2026-18101 IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper management of thread authority swaps...
CVE-2026-18101
CVE-2026-18101 affects IBM i 7.6, 7.5, 7.4 and 7.3 in the WebSphere Application Server Liberty stack. The issue is a local privilege escalation caused by improper management of thread authority swaps, with a CVSS v3.1 base score of 8.8 (LOCAL, LOW attack complexity, no user interaction; privilege...
CVE-2026-49478
Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind...
CVE-2026-49478
Fulcio (certificate authority for OpenID Connect) reports a vulnerability in OIDC discovery across versions up to 1.8.5 where cross-host redirects attach Kubernetes ServiceAccount tokens, enabling blind SSRF, JWKS key substitution/poisoning, and potential leakage of tokens to external hosts. The ...
CLEANSTART-2026-PE02324 Security fixes in fulcio-fips 1.8.7-r1
Package fulcio-fips version 1.8.7-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...
EUVD-2026-57713
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0299
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-16480
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data...
CVE-2026-14866
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore...
EUVD-2026-57620
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data...
EUVD-2026-57550
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore...
CVE-2026-14866
IBM i Access Client Solutions (ACS) versions 1.1.2.0–1.1.9.13 are affected by multiple vulnerabilities, including CVE-2026-14866, due to a publicly writable truststore that enables injection of rogue certificates. The cited advisory and CVE list indicate a local attack surface with high impact on...
CVE-2026-14866
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore...
CVE-2026-18669
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority...