GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: rancher-system-agent, whereabouts, conftest, protoc-gen-go, crossplane-provider-aws-ec2, chart-testing, ipfs-cluster, azure-workload-identity-webhook, gostatsd, kubernetes-csi-external-resizer, nginx-prometheus-exporter, crossplane-provider-aws-rds, paranoia,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: nri-couchbase-fips, nri-f5, localstack, sealed-secrets, paranoia, temporal-ui-server-fips, azuredisk-csi, pvc-autoresizer-fips, ceph-csi-operator, langfuse, cortex, gatus-fips, cloudbeat, mc, tofu-controller-fips, vendir-fips, minio-operator,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: nri-couchbase-fips, nri-f5, localstack, sealed-secrets, paranoia, temporal-ui-server-fips, azuredisk-csi, pvc-autoresizer-fips, ceph-csi-operator, langfuse, cortex, gatus-fips, cloudbeat, mc, tofu-controller-fips, vendir-fips, minio-operator,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: nri-couchbase-fips, nri-f5, localstack, flannel-cni-plugin-fips, sealed-secrets, paranoia, temporal-ui-server-fips, azuredisk-csi, pvc-autoresizer-fips, ceph-csi-operator, langfuse, cortex, gatus-fips, age, cloudbeat, mc, tofu-controller-fips, vendir-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nri-couchbase-fips, nri-f5, localstack, flannel-cni-plugin-fips, sealed-secrets, paranoia, temporal-ui-server-fips, azuredisk-csi, pvc-autoresizer-fips, ceph-csi-operator, langfuse, cortex, gatus-fips, age, cloudbeat, mc, tofu-controller-fips, vendir-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, paranoia, temporal-ui-server-fips, azuredisk-csi, pvc-autoresizer-fips, ceph-csi-operator, cortex, gatus-fips, cloudbeat, mc, tofu-controller-fips, vendir-fips, minio-operator, prometheus-elasticsearch-exporter-fips,...

openSUSE 15 Security Update : assertj-core (SUSE-SU-2026:0344-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0344-1 advisory. Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion bsc1257293. Tenable has extracted the preceding description bloc...

CVE-2017-16744

creationtimestamp| type| source ---|---|--- 2026-01-30 19:02:30+00:00| seen| https://gist.github.com/aw-junaid/e5393ee0715383c3f6ffefc141c7b487 2026-08-25 16:24:58+00:00| seen| https://gist.github.com/bbrk364/c0171ce39dd4dd9700b98e3aedec0f0c...

Security Bulletin: XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - CVE-2025-13096

Summary IBM Business Automation Workflow is vulnerable to a XML eXternal Entity injection XXE attack. Vulnerability Details CVEID:CVE-2025-13096 DESCRIPTION: IBM Business Automation Workflow is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker...

CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation

Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...

CLEANSTART-2026-QJ89068 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the external-secrets-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-JM84344 Within HostnameError

Security vulnerability affects the external-secrets package. Within HostnameError...

CLEANSTART-2026-DO54415 Within HostnameError

Security vulnerability affects the external-secrets package. Within HostnameError...

OESA-2026-1272 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data.CVE-2026-24515...

OESA-2026-1273 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data.CVE-2026-24515...

OESA-2026-1274 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data.CVE-2026-24515...

DBeaver < 21.2.3 XXE Vulnerability

The version of DBeaver installed on the remote Windows host is prior to 21.2.3. It is, therefore, affected by the following XXE vulnerability: - The dbeaver is vulnerable to XML External Entity XXE. An attacker that is able to provide a crafted XML file as input to the parseDocument function in t...

CVE-2026-24768

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect...

Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps

A study by OMICRON has revealed widespread cybersecurity gaps in the operational technology OT networks of substations, power plants, and control centers worldwide. Drawing on data from more than 100 installations, the analysis highlights recurring technical, organizational, and functional issues...

CVE-2026-1298

The Easy Replace Image plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.5.2. This is due to missing capability checks on the imagereplacementfromurl function that is hooked to the erifromurl AJAX action. This makes it possible for authenticated...