8363 matches found
CVE-2026-25492 Craft has a save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host
Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveimagesAsset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a...
CVE-2026-25492: Server-Side Request Forgery (SSRF)
Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveimagesAsset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a...
PT-2026-7142
Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the save images Asset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a...
Ubuntu: Security Advisory (USN-8015-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8014-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8013-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ sectio...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Issue Correction: Run dnf update aws-nitro-enclaves-cli --releasever 2023.10.20260202 or dnf update --advisory ALAS2023-2026-1371 --releasever 2023.10.202602...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator-fips, aws-privateca-issuer, percona-xtradb-cluster-operator, cert-manager-csi-driver, aws-privateca-issuer-fips, cert-manager-google-cas-issuer, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, step-issuer-fips,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: mariadb-operator, cert-manager-csi-driver, opentelemetry-operator, percona-server-mongodb-operator, step-issuer, cert-manager-webhook-pdns, cert-manager-cmctl, aws-privateca-issuer, cert-manager-istio-csr...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: mariadb-operator, cert-manager-csi-driver, opentelemetry-operator, percona-server-mongodb-operator, step-issuer, cert-manager-webhook-pdns, cert-manager-cmctl, aws-privateca-issuer, cert-manager-istio-csr...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator-fips, aws-privateca-issuer, percona-xtradb-cluster-operator, cert-manager-csi-driver, aws-privateca-issuer-fips, cert-manager-google-cas-issuer, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, step-issuer-fips,...
GHSA-R267-H4HP-P29F vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
CVE-2025-38597 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
GHSA-2Q7G-23RP-FJWM vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
GHSA-CRHG-X4F2-MVMV vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
GHSA-V43G-XQQR-J4R8 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
CVE-2025-22104 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...