6033 matches found
kumactl connects to control plane without verifying TLS certificate when no CA is configured
When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection Impact An attacker on the network path between the operator and the control plane can intercept user or admin A...
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to...
CVE-2026-28644
creationtimestamp| type| source ---|---|--- 2026-07-16 04:47:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:46:55+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28642
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:58+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:46:53+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28633
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:49+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:46:42+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28623
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:46:28+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28618
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-08 19:20:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117237036872266123 2026-09-09 04:46:21+00:00| seen...
CVE-2026-28614
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:33+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:46:15+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28602
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:24+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:45:53+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28596
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:18+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:45:46+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28584
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:09+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:45:37+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28583
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:45:34+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28582
creationtimestamp| type| source ---|---|--- 2026-07-16 04:46:04+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:45:32+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2025-48566
creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:45+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:45:11+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2025-48564
creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716 2026-09-09 04:49:15+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-15778
creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-20 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-20...
CVE-2026-15775
creationtimestamp| type| source ---|---|--- 2026-07-16 04:45:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-20 04:45:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720...
CVE-2026-62290: Incorrect Authorization
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...
Updated openssl packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion. CVE-2026-7383 Out-of-Bounds Read in CMS Password-Based Decryption. CVE-2026-9076 Heap Buffer Over-read in ASN.1 Content Parsing. CVE-2026-34180 PKCS12 Files with PBMAC1 Are...