23705 matches found
CVE-2024-31420 vulnerabilities
Vulnerabilities for packages: virt-launcher, harvester, harvester-fips, virt-controller-fips, virt-operator, virt-operator-fips...
GHSA-25MH-HP8X-CGRV vulnerabilities
Vulnerabilities for packages: virt-handler, virt-operator-fips, virt-launcher, harvester, harvester-fips, virt-controller-fips, docker-machine-driver-harvester...
GHSA-RJFV-PJVX-MJGV vulnerabilities
Vulnerabilities for packages: aws-load-balancer-controller-fips, aws-load-balancer-controller...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-notificationhubs, prometheus-adapter, conftest, ory-kratos-fips, crossplane-provider-aws-elasticsearch-fips, perses, cert-manager-csi-driver, kubernetes-dns-node-cache, tailscale, amazon-eks-ami-fips, hydra-fips, kro, secrets-store-csi-drive...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-notificationhubs, prometheus-adapter, conftest, ory-kratos-fips, crossplane-provider-aws-elasticsearch-fips, perses, cert-manager-csi-driver, kubernetes-dns-node-cache, tailscale, amazon-eks-ami-fips, hydra-fips, kro, secrets-store-csi-drive...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: docker-fips, buildkitd-fips, trivy-operator, spegel-fips, envoy-gateway, packer, helm-exporter-fips, docker, redpanda-operator, chainctl, scorecard, spegel, kube-arangodb-fips, kubescape-operator-fips, crossplane, grype-db, harvester, tigera-operator-fips, kube-mgmt,...
samba: Remote Code Execution in SAMR
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...
The vulnerability of the Custom Resource Definition (CRD) component of the NGINX Gateway Fabric web server controller allows a attacker to read and modify data, or cause a service failure.
The vulnerability of the Custom Resource Definition CRD component of the NGINX Gateway Fabric web server controller is related to the failure to eliminate special elements when processing string values. Exploiting this vulnerability may allow an attacker to gain read and modify access to data, or...
PT-2026-51642
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.4.1 Description Snipe-IT is an IT asset and license management system. A flaw exists where the update function within app/Http/Controllers/Assets/BulkAssetsController.php accepts the company id variable directly fr...
kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability, known as a use-after-free, occurs when the system attempts to free a memory region while it is still being used. A local attacker could trigger this condition by sending a signal that...
kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability, known as a use-after-free, occurs when the system attempts to free a memory region while it is still being used. A local attacker could trigger this condition by sending a signal that...
EUVD-2026-38198
A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...
CVE-2026-12812
A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...
CVE-2026-12812
Radware Cyber Controller (up to 10.11.0) is affected in the HTML Report Generation component, with HTML injection due to the underlying issue. The vulnerability allows remote exploitation, and the exploit has been publicly disclosed. No remediation details are provided in the documents. Affected ...
CVE-2026-12812 Radware Cyber Controller HTML Report Generation HTML injection
A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...
CVE-2026-12812 Radware Cyber Controller HTML Report Generation HTML injection
A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...
CVE-2026-12812
A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...
GHSA-PMM4-V8F6-4VPP Duplicate Advisory: Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-86vw-x4ww-x467. This link is maintained to preserve external references. Original Description Craft CMS composer package craftcms/cms versions = 5.5.0 and = 5.9.13 contain a remote code execution vulnerability i...
EUVD-2026-38176
Craft CMS composer package craftcms/cms versions = 5.5.0 and = 5.9.13 contain a remote code execution vulnerability in the FieldsController::actionRenderCardPreview method, which passes the fieldLayoutConfig POST parameter directly to Fields::createLayout without calling Component::cleanseConfig...