GO-2026-6610 vulnerabilities

Vulnerabilities for packages: metrics-server, flannel, cloud-provider-gcp-cloud-controller-manager, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, grafana,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: metrics-server, flannel, cloud-provider-gcp-cloud-controller-manager, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, grafana,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: metrics-server, flannel, cloud-provider-gcp-cloud-controller-manager, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, grafana,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: metrics-server, flannel, cloud-provider-gcp-cloud-controller-manager, custom-pod-autoscaler-operator, trivy-operator, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, grafana, doppler-kubernetes-operator,...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: metrics-server, flannel, cloud-provider-gcp-cloud-controller-manager, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, grafana,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: metrics-server, flannel, cloud-provider-gcp-cloud-controller-manager, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, grafana,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: metrics-server, flannel, cloud-provider-gcp-cloud-controller-manager, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, grafana,...

CVE-2021-46417

CVE-2021-46417 Franklin Fueling Systems Colibri Controller Module - Local File Inclusion Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2021-46417.py -u...

USN-8911-1 linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - USB core drivers; -...

CVE-2026-98211

A flaw was found in the Linux kernel's MultiMediaCard MMC host controller interface driver. When the device is removed, the driver fails to cancel pending delayed timeout tasks, allowing scheduled work to access memory that has already been released. A local user capable of triggering device...

CVE-2026-98262

A flaw was found in the Linux kernel's libahci driver. This issue can lead to a Denial of Service DoS when initializing storage controllers configured to use 32-bit Direct Memory Access DMA. Because the driver fails to clear the upper 32-bit memory address registers on hardware that physically...

CVE-2026-19571 Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

CVE-2026-19571 Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

Invoke-DCSync

Invoke-DCSync Invoke-DCSync Reference: https://adsecurity.org/?p=1729 Reference: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Goal: retrieve password hashes from all user accounts on a domain controller using the mimikatz DCSync function Warning：Only do this in a lab...

CVE-2026-92123

A flaw was found in the Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, including Pipelines, can exploit this vulnerability. The plugin does not properly intercept operations performed on a null receiver, such as method calls or property accesses...

CLEANSTART-2026-VP35771 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

Cisco Application Policy Infrastructure Controller Unauthorized File Access (cisco-sa-apic-info-priv-enAdB5vD)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability. - A privilege escalation vulnerability exists in the export policies functionality due to insufficient access control to file system resources. An authenticated, remote...

Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026 (cisco-sa-hardening-apic-UOXWtfh)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by multiple vulnerabilities. - An input validation vulnerability exists in Cisco Application Policy Infrastructure Controller APIC due to improper neutralization of user-supplied input. An...

Cisco Application Policy Infrastructure Controller API Command Injection (cisco-sa-apic-cmdinj-L6VR4E7)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability. - A command injection vulnerability exists in the web-based management API due to insufficient input validation of user-controlled command arguments. An authenticated,...

CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-Unprivileged-Information-Disclosure Repository contains description for CVE-2023-31445 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31445 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2203171453 Vulnerability:...