GO-2026-5264 vulnerabilities

Vulnerabilities for packages: minio, metrics-server, opentelemetry-collector-k8s, opentelemetry-collector-fips, telegraf, tempo, datadog-agent-fips, cloud-sql-proxy-fips, aws-otel-collector, datadog-agent, jaeger, amazon-cloudwatch-agent-operator, minio-operator-fips, elastic-agent-fips,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, crossplane-provider-aws-cognitoidentity, jobset-fips, authentik, kubernetes-dashboard-api-fips, google-guest-agent, envoy-gateway-fips, crossplane-provider-sql-fips, kyverno-policy-reporter-kyverno-plugin-fips,...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, go, kubeflow-katib...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: kots, gitea, authservice, fluent-bit-plugin-loki, atlantis, splunk-otel-collector, oauth2-proxy, falcosidekick...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, argo-workflows, kubeflow-katib...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, aws-otel-collector, loki, minio, splunk-otel-collector, cloud-sql-proxy, prometheus, datadog-agent, jaeger, prometheus-pushgateway, metrics-server, certificate-transparency, minio-operator, prometheus-operator, grafana, trillian,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: guac, sqlpad, thanos, trino, boring-registry, spire-server, chezmoi, grafana-agent-operator, rclone, terragrunt, tekton-chains, cosign, restic, secrets-store-csi-driver-provider-azure, hugo, rekor, zot, flux, py3-azure-identity, pulumi, sigstore-scaffolding, step-ca,...

CVE-2026-16810

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'dataqueryCondition' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter...

CVE-2026-16810 Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'dataqueryCondition' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter...

CVE-2026-16810

CVE-2026-16810 affects the Bit Form WordPress plugin up to version 3.2.0. The vulnerability is a generic SQL injection in the data[queryCondition] parameter caused by insufficient escaping and inadequate preparation of the existing SQL query. It requires authenticated access with administrator-le...

CVE-2026-16810

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'dataqueryCondition' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter...

EUVD-2026-58588

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'dataqueryCondition' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter...

RockyLinux 9 : kernel (RLSA-2026:54443)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54443 advisory. kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action...

CVE-2026-19026

A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...

CVE-2026-33328

A flaw was found in libvips, an image processing library. On 32-bit systems, a vulnerability in the gifload operation could lead to an integer overflow due to incorrectly determined image dimensions. This could allow a local attacker to cause the application to crash, resulting in a denial of...

ALPINE-CVE-2026-14677

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixe...

AZL-95744 CVE-2026-14677 affecting package postgresql 16.14-1

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixe...

CVE-2026-14677

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixe...

CVE-2026-14677 PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixe...