Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

14 matches found

OSV
OSV•added 2026/07/13 7:6 a.m.•7 views

CLEANSTART-2026-WK17839 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.1AI score0.01945EPSS
SaveExploits4References91
OSV
OSV•added 2026/07/13 7:6 a.m.•4 views

CLEANSTART-2026-OF46770 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.8AI score0.01945EPSS
SaveExploits4References91
Chainguard
Chainguard•added 2026/07/09 8:30 p.m.•14 views

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin, wgcf, temporal-server-fips, cert-manager-openshift-routes, flux-source-controller-fips, crossplane-provider-aws-vpclattice-fips, crossplane-provider-azure-sql, dive, crossplane-provider-aws-sns, sealed-secrets, thanos-operator,...

5.3AI score
SaveExploits0
Veracode
Veracode•added 2026/07/09 10:25 a.m.•8 views

Improper Authorization

github.com/coder/coder is vulnerable to Improper Authorization. The vulnerability is due to insufficient validation in the UpsertWorkspaceApp and insertAgentApp functions, which fail to verify that a supplied application ID belongs to the workspace being built before performing a cross-workspace...

8.7CVSS6AI score0.00508EPSS
SaveExploits0References9Affected Software2
Positive Technologies
Positive Technologies•added 2026/07/06 12:0 a.m.•14 views

PT-2026-56073

Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.34.2 Coder versions prior to 2.33.8 Coder versions prior to 2.32.7 Coder versions prior to 2.29.17 Description An issue exists where the UpsertWorkspaceApp function overwrites an existing application's agent id during...

8.7CVSS5.9AI score0.00508EPSS
SaveExploits0References15
OSV
OSV•added 2026/06/08 12:59 p.m.•21 views

CLEANSTART-2026-WS85269 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS5.8AI score0.01945EPSS
SaveExploits4References91
Wolfi
Wolfi•added 2026/04/11 2:51 a.m.•12 views

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: polaris, secrets-store-csi-driver-provider-aws, smarter-device-manager, aws-privateca-issuer, apko, dbmate, grafana-operator, rabbitmq-messaging-topology-operator, fluxcd-kustomize-mutating-webhook, local-path-provisioner, spire-server, nodetaint,...

5.3AI score
SaveExploits0
Chainguard
Chainguard•added 2025/08/09 1:17 p.m.•71 views

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: git-credential-oauth, wavefront-collector-for-kubernetes, configmap-reload, mig-parted, nvidia-nsight-compute-12.8, temporal-server-fips, mkcert, xeol-fips, nvidia-nsight-compute-13.1, flux-source-controller-fips, metallb, crossplane-provider-azure-sql, dive,...

5.3AI score
SaveExploits0
Wolfi
Wolfi•added 2024/03/06 12:31 a.m.•424 views

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: hugo-extended, kubernetes-csi-external-provisioner, src, cortex, grafana-operator, metrics-server, pulumi, fuse-overlayfs-snapshotter, helm, ollama, kwok, skopeo, helm-operator, minio, docker, crossplane-provider-aws-sqs, ip-masq-agent, dgraph,...

5.3AI score
SaveExploits0
OSV
OSV•added 2022/05/24 5:2 p.m.•19 views

GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

6.5CVSS6.4AI score0.01764EPSS
SaveExploits0References8
Wolfi
Wolfi•added 2022/05/24 5:2 p.m.•10 views

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

7.5AI score
SaveExploits0
Chainguard
Chainguard•added 2022/05/24 5:2 p.m.•12 views

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

7.3AI score
SaveExploits0
RedHat Linux
RedHat Linux•added 2019/12/17 2:19 a.m.•6 views

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

6.5CVSS5.8AI score0.01764EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux•added 2019/12/16 1:57 p.m.•7 views

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

6.5CVSS5.8AI score0.01764EPSS
SaveExploits0References5
Rows per page
Query Builder