GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kots, istio, argo-rollouts, sonobuoy, teleport, eksctl, rancher, cilium-cli, k8sgpt, gitlab-kas, skaffold, k8ssandra-client, jitsucom-bulker, cri-tools, linkerd2, headlamp, kiali, kube-arangodb, kubernetes, aws-node-termination-handler,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kots, istio, argo-rollouts, sonobuoy, teleport, eksctl, rancher, cilium-cli, k8sgpt, gitlab-kas, skaffold, k8ssandra-client, jitsucom-bulker, cri-tools, linkerd2, headlamp, kiali, kube-arangodb, kubernetes, aws-node-termination-handler,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator-fips, rancher, istio-fips, k8sgpt-operator, teleport, envoy-gateway-fips, kiali-fips, sonobuoy-fips, percona-server-mongodb-operator, cloudnative-pg-fips, sonobuoy, argo-cd, zarf, hubble, kubernetes-dashboard-api,...

EUVD-2026-22837

It has been identified that a vulnerability CWE-427 exists in the UPS Uninterruptible Power Supply management application, whereby improper permissions on the installation directory allow a malicious actor to place a DLL that is then executed with administrator privileges. If a malicious DLL is...

Mobatek MobaXterm 安全漏洞

Mobatek MobaXterm is a terminal software developed by the French company Mobatek. It integrates an enhanced terminal, X servers, and Unix command sets GNU/Cygwin. The Mobatek MobaXterm Home Edition 26.1 and earlier versions have security vulnerabilities. These vulnerabilities stem from an unknown...

PDFium Component Code Execution

The vulnerability of the PDFium component in the Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

SUSE CVE-2026-40947

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path...

CVE-2026-39424

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File. When an administrator exports the application chat history to an Excel file .xlsx via the...

PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code

Summary The plugin security validator in PySpector uses AST-based static analysis to prevent dangerous code from being loaded as plugins. The blocklist implemented in PluginSecurity.validateplugincode is incomplete and can be bypassed using several Python constructs that are not checked. An...

EUVD-2026-23135

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path...

Untrusted Search Path

Overview yubikey-manager is a Library and CLI for managing your YubiKey configuration. Affected versions of this package are vulnerable to Untrusted Search Path due to the unintended search order for dynamic link libraries. An attacker can execute arbitrary code by placing a malicious DLL in a...

CVE-2026-40947

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path...

PT-2026-33379

Name of the Vulnerable Software and Affected Versions zrok versions prior to 2.0.1 Description The GetSessionCookie function in the endpoints module parses an attacker-supplied cookie chunk count and calls makestring, count without an upper bound before token validation. This occurs on every...

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Adobe InDesign Buffer Overflow DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...

Adobe Bridge Buffer Overflow

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Bridge Buffer Overflow

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Framemaker Buffer Overflow

The vulnerability of the desktop publishing system Adobe Framemaker is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Bridge Buffer Overflow

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...