DEBIAN-CVE-2026-39984

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimestampResponse correctly verifies the certificate chain signature, but the TSA-specific constraint...

PT-2026-33182

Name of the Vulnerable Software and Affected Versions Istio versions 1.25.0 through 1.27.8 Istio versions 1.28.0 through 1.28.5 Istio versions 1.29.0 through 1.29.1 Description In the AuthorizationPolicy, the serviceAccounts and notServiceAccounts fields incorrectly interpret dots . as regular...

GHSA-XM5M-WGH2-RRG3 Sigstore Timestamp Authority has Improper Certificate Validation in verifier

Authorization bypass via certificate bag manipulation in sigstore/timestamp-authority verifier An authorization bypass vulnerability exists in sigstore/timestamp-authority verifier timestamp-authority/v2/pkg/verification: VerifyTimestampResponse function correctly verifies the certificate chain b...

Siemens TPM 2.0

SUMMARY The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and recommends to update to the...

CVE-2026-6139

A vulnerability has been found in Totolink A7100RU 7.4cu.2313b20191024. This affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument FileName leads to os command injection. The attack can be launched remotely. The...

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU 7.4cu.2313b20191024 version contains a vulnerability related to operating system command injection. This vulnerability stems from improper handling of the parameter “FileName” in the function...

CVE-2019-25713

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25713 2026-04-12 15:00:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmjpdcwy2a 2026-04-17 16:07:08+00:00| seen|...

CVE-2019-25712

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25712 2026-04-12 14:45:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclothsug2m...

CVE-2019-25710

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25710 2026-04-12 15:05:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmsntnnf2o 2026-04-17 15:07:08+00:00| seen|...

CVE-2019-25706

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25706 2026-04-12 14:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjck6lqblp2m...

CVE-2019-25703

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25703 2026-04-12 14:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjts3lda2r...

CVE-2019-25709

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25709 2026-04-12 14:35:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcl676fhl2a 2026-04-23 21:07:07+00:00| seen|...

CVE-2019-25707

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25707 2026-04-12 14:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclxs2ktc2g...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, q, k3s, docker-machine-driver-harvester, local-static-provisioner, kubernetes-dashboard-auth, bank-vaults, weaviate, logstash-exporter, kubernetes-csi-driver-hostpath, grafana-rollout-operator, cadvisor, kube-bench, mailpit, dive, configmap-reload,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: lvm-driver, promxy, verticadb-operator, cri-tools, step, kube-state-metrics, coredns, cortex, kubernetes-csi-node-driver-registrar, crossplane, cert-manager, k3s, terraform-provider-kubernetes, gitaly, xeol, docker-machine-driver-harvester, kserve-rest-proxy,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: lvm-driver, promxy, verticadb-operator, cri-tools, step, kube-state-metrics, coredns, cortex, kubernetes-csi-node-driver-registrar, crossplane, cert-manager, k3s, terraform-provider-kubernetes, gitaly, xeol, docker-machine-driver-harvester, kserve-rest-proxy,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, q, k3s, docker-machine-driver-harvester, local-static-provisioner, kubernetes-dashboard-auth, bank-vaults, weaviate, logstash-exporter, grafana-rollout-operator, cadvisor, kube-bench, mailpit, dive, configmap-reload, git-sync, omnibump,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: falco-exporter-fips, flannel-fips, grafana-beyla, grafana-agent-operator, cloud-sql-proxy, kubevela-fips, vault-benchmark, thanos-receive-controller, grafana-rollout-operator, crossplane-function-environment-configs, go-discover, sftpgo, kube-state-metrics,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: falco-exporter-fips, flannel-fips, grafana-beyla, nova-fips, s5cmd, grafana-agent-operator, pushprox, cloud-sql-proxy, kubevela-fips, aws-network-policy-agent-fips, custom-pod-autoscaler-operator-fips, timestamp-authority-fips, vault-benchmark,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: falco-exporter-fips, nova-fips, cloud-sql-proxy, timestamp-authority-fips, vault-benchmark, thanos-receive-controller, grafana-rollout-operator, whereabouts-fips, cilium-envoy-fips, prometheus-podman-exporter-fips, verticadb-operator, k6-operator, hello-world-golang,...