5531 matches found
CVE-2026-17572
creationtimestamp| type| source ---|---|--- 2026-07-27 20:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-17572...
BIT-CERT-MANAGER-2026-62290 cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...
Fedora 43 : p11-kit (2026-566791181a)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-566791181a advisory. - server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit CVE-2026-13757 - fixed confusing error...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: hubble-ui, kube-state-metrics, cluster-api, k3s, cloud-provider-azure, openbao, metallb, azure-service-operator, kwok, istio, gatekeeper, kube-metrics-adapter, grafana, kyverno, rancher-system-agent, node-feature-discovery, cloud-provider-gcp-cloud-controller-manager...
CVE-2026-56391
creationtimestamp| type| source ---|---|--- 2026-07-24 08:15:04+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56391...
CVE-2026-13063
creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:33+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-13058
creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:21+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-13055
creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:13+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-13076
creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:00+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-13074
creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:55+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-9737
creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:53+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-13069
creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
MiracleLinux 9 : openssl-3.5.5-4.el9_8.ML.1 (AXSA:2026-1339:14)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1339:14 advisory. openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing CVE-2026-7383 openssl: OpenSSL: Denial of Service due...
CVE-2026-62290 vulnerabilities
Vulnerabilities for packages: cert-manager-webhook-pdns, aws-privateca-issuer, mariadb-operator, cert-manager-istio-csr, cert-manager-csi-driver, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer...
Alibaba Cloud Linux 3 : 0221: podman (ALINUX3-SA-2026:0221)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0221 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-33811: When using LookupCNAME wit...
CVE-2026-62290 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, step-issuer-fips, percona-xtradb-cluster-operator, redpanda-operator, athenz-csi-driver, gitlab-operator, cert-manager-google-cas-issuer-fips, gitlab-operator-fips, athenz-cert-manager-issuer-fips, cert-manager-istio-csr,...
CVE-2026-53910
creationtimestamp| type| source ---|---|--- 2026-07-22 16:15:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-53910 2026-07-25 17:28:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrifcmd74u2c...
CVE-2026-55990
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves the tail slots at the '0xdb' fill that libsodium's allocator writes...
CVE-2026-55990
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves the tail slots at the '0xdb' fill that libsodium's allocator writes...