20785 matches found
CVE-2025-55199 vulnerabilities
Vulnerabilities for packages: chartmuseum, trivy, zot, helm-set-status, k8sgpt, nova, k8ssandra-client, kots, flux-helm-controller, chart-testing, helm-docs, zarf, cerbos, cluster-api-helm-controller, tw, linkerd2, trivy-operator, cert-manager-cmctl, helm-operator, eksctl, rancher-fleet, istio,...
CVE-2025-55198 vulnerabilities
Vulnerabilities for packages: chartmuseum, trivy, zot, helm-set-status, k8sgpt, nova, k8ssandra-client, kots, flux-helm-controller, chart-testing, helm-docs, zarf, cerbos, cluster-api-helm-controller, linkerd2, trivy-operator, cert-manager-cmctl, helm-operator, eksctl, rancher-fleet, istio,...
GHSA-F9F8-9PMF-XV68 vulnerabilities
Vulnerabilities for packages: chartmuseum, trivy, zot, helm-set-status, k8sgpt, nova, k8ssandra-client, kots, flux-helm-controller, chart-testing, helm-docs, zarf, cerbos, cluster-api-helm-controller, linkerd2, trivy-operator, cert-manager-cmctl, helm-operator, eksctl, rancher-fleet, istio,...
GHSA-9H84-QMV7-982P vulnerabilities
Vulnerabilities for packages: chartmuseum, trivy, zot, helm-set-status, k8sgpt, nova, k8ssandra-client, kots, flux-helm-controller, chart-testing, helm-docs, zarf, cerbos, cluster-api-helm-controller, tw, linkerd2, trivy-operator, cert-manager-cmctl, helm-operator, eksctl, rancher-fleet, istio,...
CVE-2025-45315
A cross-site scripting XSS vulnerability in the /controller/admin.php endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the email parameter...
Linux Distros Unpatched Vulnerability : CVE-2024-35816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: prevent leak of left- over IRQ on unbind Commit 5a95f1ded28691e6 firewire:...
Linux Distros Unpatched Vulnerability : CVE-2024-35978
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hcireqsynccomplete In 'hcireqsynccomplete', always free the...
Malicious code in dbenvy-ci-controller-client (npm)
The package dbenvy-ci-controller-client was found to contain malicious code...
MAL-2025-12661 Malicious code in @zalastax/nolb-node-red-contl (npm)
The package @zalastax/nolb-node-red-contl was found to contain malicious code...
MAL-2025-18096 Malicious code in dbenvy-ci-controller-client (npm)
The package dbenvy-ci-controller-client was found to contain malicious code...
CVE-2025-8965
A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...
CVE-2025-8310
Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...
CVE-2025-8965 linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload
A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...
CVE-2025-8965 linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload
A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...
CVE-2025-27847
In ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are not revoked on logout...
CVE-2025-27846
In ESPEC North America Web Controller 3 before 3.3.8, an attacker with physical access can gain elevated privileges because GRUB and the BIOS are unprotected...
ROS-20250814-02
Ingress controller vulnerability in Kubernetes ingress-nginx cluster is related to errors in the processing of Ingress object annotations. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...
CVE-2025-27846
In ESPEC North America Web Controller 3 before 3.3.8, an attacker with physical access can gain elevated privileges because GRUB and the BIOS are unprotected...
CVE-2025-27845
In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...