GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: rancher-security-scan, kyverno-policy-reporter-plugins-trivy-fips, scorecard, contour, custom-pod-autoscaler, terraform-fips, s5cmd, vertical-pod-autoscaler, nvidia-nsight-compute-12.9, terraform-provider-sendgrid, go-licenses, dockerize, speedtest-go, regclient,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: rancher-security-scan, kyverno-policy-reporter-plugins-trivy-fips, scorecard, contour, custom-pod-autoscaler, terraform-fips, s5cmd, vertical-pod-autoscaler, nvidia-nsight-compute-12.9, terraform-provider-sendgrid, go-licenses, dockerize, speedtest-go, regclient,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: rancher-security-scan, kyverno-policy-reporter-plugins-trivy-fips, scorecard, contour, custom-pod-autoscaler, terraform-fips, s5cmd, vertical-pod-autoscaler, nvidia-nsight-compute-12.9, terraform-provider-sendgrid, go-licenses, dockerize, speedtest-go, regclient,...

EUVD-2019-2060

Malware in sbrugna...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, linkerd2-proxy-init, gostatsd, newrelic-nri-statsd, kuberay-operator, gitsign, vexctl, hivemind, confluent-common-docker, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, vault-k8s, grafana-operator, mongodb-kubernetes-operator, dagdotdev,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, linkerd2-proxy-init, gostatsd, newrelic-nri-statsd, kuberay-operator, gitsign, vexctl, hivemind, confluent-common-docker, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, vault-k8s, grafana-operator, mongodb-kubernetes-operator, dagdotdev,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: undock, kpt, lazydocker, promxy, bento, docker-credential-gcr, cluster-api-helm-controller, crossplane, openbao, skaffold, opentelemetry-operator, rancher-machine, prometheus, portieris, newrelic-infrastructure-agent, k3s, bom, xeol, helm-mapkubeapis, falcoctl,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, helm-set-status, openbao-fips, beats, falcoctl-fips, skaffold-fips, gatekeeper, traefik, cluster-api-fips, gitlab-rails-ce-fips, helm-mapkubeapis, promxy-fips, docker-credential-gcr-fips, lazydocker, kpt, cluster-api-helm-controller, crossplane...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: authservice, cortex, flannel-cni-plugin, crane, sbom-convert, postgres-operator, age, k6, aws-application-networking-k8s, rancher-webhook, trino, filebrowser, kserve-rest-proxy, timoni, kube-logging-operator, velero-plugin-for-microsoft-azure, gh, haproxy-ingress,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: authservice, cortex, flannel-cni-plugin, crane, sbom-convert, postgres-operator, age, k6, aws-application-networking-k8s, rancher-webhook, trino, filebrowser, kserve-rest-proxy, timoni, kube-logging-operator, velero-plugin-for-microsoft-azure, gh, haproxy-ingress,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, victoriametrics-operator-fips, s5cmd, vertical-pod-autoscaler, nvidia-nsight-compute-12.9, terraform-provider-sendgrid, rabbitmq-default-user-credential-updater, go-licenses, dockerize, speedtest-go, regclient, elvish, gitness, nri-kafka...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, victoriametrics-operator-fips, s5cmd, vertical-pod-autoscaler, nvidia-nsight-compute-12.9, terraform-provider-sendgrid, rabbitmq-default-user-credential-updater, go-licenses, dockerize, speedtest-go, regclient, elvish, gitness, nri-kafka...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: dive, gcsfuse, cortex, flannel-cni-plugin, kaf, logstash-exporter, kube-state-metrics, tailscale, aws-flb-firehose, memcached-exporter, temporal, helm-push, terraform, smarter-device-manager, kine, nri-mysql, newrelic-fluent-bit-output, flux-helm-controller, nri-mssq...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: dive, gcsfuse, cortex, flannel-cni-plugin, kaf, logstash-exporter, kube-state-metrics, tailscale, aws-flb-firehose, memcached-exporter, temporal, helm-push, terraform, smarter-device-manager, kine, nri-mysql, newrelic-fluent-bit-output, flux-helm-controller, nri-mssq...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: tekton-chains, policy-controller, falcoctl-fips, kargo, nerdctl, kubescape, scorecard, crane, kpt, pulumi, policy-controller-fips, eksctl, flux-image-reflector-controller, kubeflow-katib, kubevela, slsa-verifier, aactl, cadvisor, helm, argo-workflows, dagger,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: tekton-chains, policy-controller, falcoctl-fips, kargo, nerdctl, kubescape, scorecard, crane, kpt, pulumi, policy-controller-fips, eksctl, flux-image-reflector-controller, kubeflow-katib, kubevela, slsa-verifier, aactl, cadvisor, helm, argo-workflows, dagger,...

Ubuntu: Security Advisory (USN-4856-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Docker Desktop for Windows platform, related to the improper assignment of permissions to the docker-credential-wincred.exe file, allows a malicious individual to escalate their privileges.

The vulnerability of the Docker Desktop for Windows platform, which is used for developing and delivering container applications, is related to the incorrect assignment of permissions for the file docker-credential-wincred.exe in the %PROGRAMDATA%\DockerDesktop\version-bin directory. Exploiting...

VulnCheck KEV: CVE-2019-15752

Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin...

USN-4856-1: docker-credential-helpers vulnerability

Jasiel Spelman discovered that docker-credential-helpers has a double free. A local attacker could use this to cause a denial of service crash or possibly execute arbitrary code...