55434 matches found
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: conftest-fips, ocm-kubernetes-controller-fips, ratify, steampipe, conftest, linkerd2, kyverno, drone-fips, xeol, k8ssandra-client, opentofu-fips, consul-k8s-fips, xeol-fips, manifest-tool, tw, consul-k8s, rancher, kyverno-fips, cluster-api-helm-controller-fips,...
GO-2025-3602 vulnerabilities
Vulnerabilities for packages: kubescape, pluto, tw, trivy, helm-docs, flux, flux-source-controller, eksctl, helm-push, zarf, cluster-api-helm-controller, k8ssandra-client, cert-manager-cmctl, k9s, helm-operator, flux-helm-controller, chart-testing, chartmuseum, cilium-cli, rancher-helm, kots, zot...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: pluto, tw, linkerd2, trivy, helm-docs, flux-source-controller, istio, eksctl, cerbos, helm-push, rancher-fleet, zarf, cluster-api-helm-controller, k8sgpt, k8ssandra-client, cert-manager-cmctl, k9s, helm-operator, flux-helm-controller, chart-testing, chartmuseum, karg...
WordPress ProSolution WP Client plugin < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls vulnerability
Subscriber+ proSolajaxTablesync and proSolajaxClearlog Calls vulnerability discovered by Nir Yehoshua in WordPress Plugin ProSolution WP Client versions 2.0.9...
The vulnerability in the `fs/smb/client/smb2file.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the fs/smb/client/smb2file.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
VulnCheck KEV: CVE-2026-58231
SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...
The vulnerability in the ceph/osd_client.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the ceph/osdclient.c component of the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...
DEBIAN-CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...
CVE-2026-18846
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...
CVE-2026-14875
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...
EUVD-2026-58363
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...
CVE-2026-14875
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...
CVE-2026-17197 IBM i is Affected By Multiple Vulnerabilities in Host Servers
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity...
CVE-2026-73647
creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:03+00:00| published-proof-of-concept| https://github.com/quasarframework/quasar/security/advisories/GHSA-3r53-75j5-3g7j...
ROOT-APP-MAVEN-CVE-2026-39304 CVE-2026-39304 in org.apache.activemq:activemq-client - Patched by Root
Root has patched CVE-2026-39304 in the org.apache.activemq:activemq-client package for Root:Maven. Multiple fixed versions available...
CVE-2026-12236 Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type responses with zero data length
The Bluetooth host GATT client function parsereadstdchardesc in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BTGATTDISCOVERSTDCHARDESC discovery. The per-entry stride rsp-len is taken directly from the peer's PDU, and the parse loop bo...
EUVD-2026-58131
The Bluetooth host GATT client function parsereadstdchardesc in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BTGATTDISCOVERSTDCHARDESC discovery. The per-entry stride rsp-len is taken directly from the peer's PDU, and the parse loop bo...
CVE-2026-54481
Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...
