206 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, kyverno, emissary, flux-kustomize-controller, tkn, apisix-ingress-controller, azure-service-operator, cloud-provider-azure, cluster-api-azure-controller, fluent-operator, kubescape, k3s, caddy, gitlab-kas, external-secrets-operator, openbao,...
GO-2025-3774 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-hostpath, mesosphere-vsphere-csi, emissary, rancher-fleet, yunikorn-k8shim, cloud-provider-gcp-cloud-controller-manager, rancher-system-agent, docker-machine-driver-harvester, vcluster...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: delve, tkn, nginx-prometheus-exporter, cerbos, aws-application-networking-k8s, helm-set-status, nuclei, cloud-provider-vsphere, ratify, bom, yunikorn-k8shim, rancher-system-upgrade-controller, ipfs-cluster, harbor-registry, opa, envconsul, trivy, kind, nri-apache, ko...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: node-feature-discovery, kyverno, emissary, flux-kustomize-controller, tkn, apisix-ingress-controller, azure-service-operator, cloud-provider-azure, cluster-api-azure-controller, fluent-operator, kubescape, k3s, caddy, gitlab-kas, external-secrets-operator, openbao,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, gitsign, goose, langfuse-fips, otel-cli, flux-helm-controller, snyk-cli, cluster-api, ytt, gpu-operator-fips, k8ssandra-operator, flux-operator-fips, kafka-proxy, crossplane-provider-aws-lambda-fips,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: aws-fsx-csi-driver-fips, cephcsi, langfuse-fips, smarter-device-manager, gpu-operator-fips, crossplane-provider-aws-lambda-fips, terraform-provider-sendgrid-fips, argocd-image-updater, istio-fips, falcoctl-fips, extism, atlantis, hcloud, amazon-k8s-cni-fips,...
CVE-2025-9292
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful...
CVE-2025-9292 Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful...
CVE-2025-9292
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful...
CVE-2025-9292
CVE-2025-9292 affects TP-Link Omada Cloud Controller. A permissive web security configuration may bypass cross-origin restrictions in certain conditions, enabling potential unauthorized disclosure of sensitive data. Exploitation requires an existing client-side injection vulnerability and access ...
PT-2026-7955
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful...
TP-Link Omada Cloud Controller 安全漏洞
TP-Link Omada Cloud Controller is a central management software developed by TP-Link Corporation. There is a security vulnerability in TP-Link Omada Cloud Controller, which stems from lax Web security configurations. This vulnerability may allow bypass of cross-domain restrictions that are enforc...
CVE-2025-9292: Permissive Cross-domain Policy with Untrusted Domains
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful...
CVE-2021-22101
Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of ServiceDoS vulnerability allowing unauthenticated attackers to cause denial of service by using REST HTTP requests with labelselectors on multiple V3 endpoints by generating an enormous SQL query...
CVE-2021-22100
In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that accidentally or maliciously causes CC instances to timeout and fail is possible. An attacker can leverage this vulnerability to cause an inability for anyone to push or...
EUVD-2019-13409
Malware in sbrugna...
EUVD-2017-17012
Malware in sbrugna...
EUVD-2012-4008
Malware in sbrugna...