35999 matches found
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: k8sgateway, sonobuoy, guac, kubeflow-katib, kuberlr, nri-nginx, xeol, esbuild, kbld, kapp, kubernetes-csi-driver-nfs, podinfo, sftpgo-plugin-auth, secrets-store-csi-driver, src-fingerprint, restic, runc, spire-server, neuvector-sigstore-interface,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: xeol, kubernetes-csi-driver-nfs, restic, apache-exporter, kubernetes-csi-external-attacher, step-kms-plugin, litestream, kubernetes-replicator, external-dns, terraform-provider-pagerduty, policy-controller, rabbitmq-messaging-topology-operator, ksops,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: k8sgateway, sonobuoy, guac, kubeflow-katib, kuberlr, xeol, kbld, kapp, kubernetes-csi-driver-nfs, nri-jmx, podinfo, secrets-store-csi-driver, sftpgo-plugin-auth, src-fingerprint, kubernetes-csi-driver-hostpath, restic, runc, spire-server, neuvector-sigstore-interface...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, mongodb-kubernetes-operator-fips, crossplane-provider-aws-memorydb-fips, yunikorn-web-fips, boring-registry, nri-postgresql-fips, knative-operator-fips, azure-aad-pod-identity-mic,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, mongodb-kubernetes-operator-fips, crossplane-provider-aws-memorydb-fips, yunikorn-web-fips, boring-registry, nri-postgresql-fips, knative-operator-fips, azure-aad-pod-identity-mic,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, metallb, mongodb-kubernetes-operator-fips, crossplane-provider-aws-memorydb-fips, yunikorn-web-fips, boring-registry, nri-postgresql-fips, knative-operator-fips,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, metallb, mongodb-kubernetes-operator-fips, crossplane-provider-aws-memorydb-fips, yunikorn-web-fips, boring-registry, nri-postgresql-fips, knative-operator-fips,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, metallb, mongodb-kubernetes-operator-fips, crossplane-provider-aws-memorydb-fips, yunikorn-web-fips, boring-registry, nri-postgresql-fips, knative-operator-fips,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, metallb, mongodb-kubernetes-operator-fips, crossplane-provider-aws-memorydb-fips, yunikorn-web-fips, boring-registry, nri-postgresql-fips, knative-operator-fips,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, mongodb-kubernetes-operator-fips, crossplane-provider-aws-memorydb-fips, yunikorn-web-fips, boring-registry, nri-postgresql-fips, knative-operator-fips, azure-aad-pod-identity-mic,...
Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms
Google-owned Mandiant on Friday said it identified an "expansion in threat activity" that uses tradecraft consistent with extortion-themed attacks orchestrated by a financially motivated hacking group known as ShinyHunters. The attacks leverage advanced voice phishing aka vishing and bogus...
Malicious code in snapshot-date (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
MAL-2026-610 Malicious code in snapshot-date (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF008. Vulnerability Details CVEID:CVE-2019-17543 DESCRIPTION: LZ4 before 1.9.2 has a heap-based buffer overflow in...
Security Bulletin: Due to use of VMware vCenter, IBM Cloud Pak System is affected by header injection and denial-of-service vulnerabilities [CVE-2025-41250,CVE-2025-41241]
Summary Due to use of VMware vCenter, IBM Cloud Pak System is affected by header injection and denial-of-service vulnerabilities CVE-2025-41250,CVE-2025-41241. IBM Cloud Pak System has addressed these vulnerabilities. IBM Cloud Pak System includes the patched vCenter Server 8.0 U3g release as par...
Security Bulletin: Multiple Vulnerabilities in VMware ESXi affect IBM Cloud Pak System
Summary Vulnerabilities in VMware ESXi affect IBM Cloud Pak System. IBM Cloud Pak System has addressed vulnerabilities. Cloud Pak Sytem has delivered updated workload nodes to VMware ESXi 83U3g. Vulnerability Details CVEID:CVE-2025-41236 DESCRIPTION: VMware ESXi, Workstation, and Fusion contain a...
CLEANSTART-2026-ZP68963 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
CLEANSTART-2026-RX06615 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
EUVD-2026-4966
Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac...
Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac
Impact It's possible for an authenticated backoffice-user to enumerate and traverse paths/files on the systems filesystem and read their contents, on Mac/Linux Umbraco installations using Forms. As Umbraco Cloud runs in a Windows environment, Cloud users aren't affected. Patches This issue affect...