26415 matches found
GHSA-CFP9-33RC-J74F vulnerabilities
Vulnerabilities for packages: atlantis, rancher-agent, verticadb-operator, regclient, prometheus-operator, cloud-provider-aws, nats-top, tkn, aws-application-networking-k8s, go, cadvisor, opencost, opentelemetry-operator, gitlab-kas, nri-consul, dgraph, nri-mssql, kubernetes, gitlab-pages, delve,...
CVE-2026-27144 vulnerabilities
Vulnerabilities for packages: atlantis, rancher-agent, verticadb-operator, regclient, prometheus-operator, cloud-provider-aws, nats-top, tkn, aws-application-networking-k8s, go, cadvisor, opencost, opentelemetry-operator, gitlab-kas, nri-consul, dgraph, nri-mssql, kubernetes, gitlab-pages, delve,...
GHSA-CQRX-3M42-5P5W vulnerabilities
Vulnerabilities for packages: atlantis, rancher-agent, verticadb-operator, regclient, prometheus-operator, cloud-provider-aws, nats-top, tkn, aws-application-networking-k8s, go, cadvisor, opencost, opentelemetry-operator, gitlab-kas, nri-consul, dgraph, nri-mssql, kubernetes, gitlab-pages, delve,...
GHSA-CFP9-33RC-J74F vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-attacher, karpenter, boringssl-fips-static, karpenter-fips, loki-fips, longhorn-engine, falco-no-driver, aws-eks-pod-identity-agent-fips, secrets-store-csi-driver-provider-azure, docker-cli-fips, container-object-storage-interface, istio-fips,...
CVE-2026-27143 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-attacher, karpenter, boringssl-fips-static, karpenter-fips, loki-fips, longhorn-engine, falco-no-driver, aws-eks-pod-identity-agent-fips, secrets-store-csi-driver-provider-azure, docker-cli-fips, container-object-storage-interface, istio-fips,...
GHSA-CQRX-3M42-5P5W vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-attacher, karpenter, boringssl-fips-static, karpenter-fips, loki-fips, longhorn-engine, falco-no-driver, aws-eks-pod-identity-agent-fips, secrets-store-csi-driver-provider-azure, docker-cli-fips, container-object-storage-interface, istio-fips,...
CVE-2026-27144 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-attacher, karpenter, boringssl-fips-static, karpenter-fips, loki-fips, longhorn-engine, falco-no-driver, aws-eks-pod-identity-agent-fips, secrets-store-csi-driver-provider-azure, docker-cli-fips, container-object-storage-interface, istio-fips,...
EUVD-2026-23442
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...
CVE-2026-6284
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...
ch.exense.commons:exense-auth-ldap (>=1.3.0, <=1.3.1), ch.exense.commons:exense-core-server (>=1.3.0, <=1.3.1) +12 more potentially affected by CVE-2026-40458 +1 more via org.pac4j:pac4j-ldap (>=4.0.0, <=4.4.0)
org.pac4j:pac4j-ldap MAVEN version =4.0.0, =1.3.0, =1.3.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =1.0.0.release, =1.0.1.release Source cves: CVE-2026-40458, CVE-2026-40459 Source advisory: SNYK:JAVA-ORGPAC4J-16109662...
CVE-2026-6284
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...
USN-8185-1: Linux kernel (NVIDIA) vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
USN-8179-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
USN-8184-1: Linux kernel (Real-time) vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
CVE-2026-39984 vulnerabilities
Vulnerabilities for packages: ratify, aactl, skaffold, tflint, tkn, policy-controller, witness, trivy-operator, kubescape, ko, kyverno-notation-aws, vexctl, tekton-chains, crossplane, spire-server, falcoctl, buildkitd, kyverno, flux-source-controller, gitsign, zarf, slsa-verifier, zot, gh,...
GHSA-XM5M-WGH2-RRG3 vulnerabilities
Vulnerabilities for packages: ratify, aactl, skaffold, tflint, tkn, policy-controller, witness, trivy-operator, kubescape, ko, kyverno-notation-aws, vexctl, tekton-chains, crossplane, spire-server, falcoctl, buildkitd, kyverno, flux-source-controller, gitsign, zarf, slsa-verifier, zot, gh,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007565)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007565 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Do not enable irqs when handling spurious interrups We triggered the following...
CVE-2026-40304: Improper Access Control
zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the unaccess handler controller/unaccess.go contains a logical error in its ownership guard: when a frontend record has environmentid = NULL the marker for admin-created global frontends, the conditio...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007584)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007584 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fec: remove .ndopollcontroller to avoid deadlocks There is a deadlock issue found in sungem...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007312)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007312 advisory. In the Linux kernel, the following vulnerability has been resolved: can: j1939: Fix UAF in j1939skmatchfilter during setsockoptSOJ1939FILTER Lock jsk-sk to prevent U...