CVE-2025-6261 Fleetwire Fleet Management Plugin <= 1.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via fleetwire_list Shortcode

The Fleetwire Fleet Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fleetwirelist shortcode in all versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2025-30516 · WordPress · Fleetwire Fleet Management

Name of the Vulnerable Software and Affected Versions: Fleetwire Fleet Management versions prior to 1.0.20 Description: The Fleetwire Fleet Management plugin for WordPress is susceptible to stored cross-site scripting through the fleetwire list shortcode due to insufficient input sanitization and...

WordPress plugin Fleetwire Fleet Management 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, helm-operator, rancher-fleet, helm-push, cerbos, istio, trivy, k8ssandra-client, envoy-gateway, rancher-helm, linkerd2, chart-testing, kots, helm-docs, chartmuseum, pluto, flux-helm-controller, k9s, cert-manager-cmctl, kargo,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, helm-operator, rancher-fleet, helm-push, cerbos, istio, trivy, k8ssandra-client, envoy-gateway, rancher-helm, linkerd2, chart-testing, kots, helm-docs, chartmuseum, pluto, flux-helm-controller, k9s, cert-manager-cmctl, kargo,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: teleport, consul-k8s-fips, pluto, cert-manager-cmctl-fips, helm-operator-fips, chart-testing, helm-operator, zot, chartmuseum-fips, k8ssandra-client, tw, linkerd2-fips, cerbos-fips, kargo, harbor-fips, flux-source-controller-fips, istio, zarf, kuma, chart-testing-fip...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: teleport, consul-k8s-fips, pluto, cert-manager-cmctl-fips, helm-operator-fips, chart-testing, helm-operator, zot, chartmuseum-fips, k8ssandra-client, tw, linkerd2-fips, cerbos-fips, kargo, harbor-fips, flux-source-controller-fips, istio, zarf, kuma, chart-testing-fip...

CVE-2021-21296

Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is currently ongoing. We believe the...

CVE-2019-1020009

Fleet before 2.1.2 allows exposure of SMTP credentials...

Assured Telematics Fleet Management System 安全漏洞

Assured Telematics Fleet Management System is an IoT solution for fleet management from Assured Telematics that provides real-time vehicle tracking, driving behavior analysis, fuel efficiency optimization, and maintenance schedule management capabilities for logistics and transportation and fleet...

GO-2025-3649 Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet

Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation during SSH connections if the certificate isn’t set in the knownhosts file. An attacker can intercept and manipulate data by positioning themselves between the client and server, effectively conducting a...

PT-2025-19348 · Fleet · Fleet

Name of the Vulnerable Software and Affected Versions: Fleet versions prior to v0.10.12 Fleet versions prior to v0.11.7 Fleet versions prior to v0.12.2 Description: A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate whe...

CVE-2025-30702

Vulnerability in the Fleet Patching and amp; Provisioning component of Oracle Database Server. Supported versions that are affected are 19.3-19.26. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Fleet Patching and amp; Provisioning...

CVE-2025-30702

Vulnerability in the Fleet Patching and amp; Provisioning component of Oracle Database Server. Supported versions that are affected are 19.3-19.26. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Fleet Patching and amp; Provisioning...

CVE-2025-30702

Vulnerability in the Fleet Patching and amp; Provisioning component of Oracle Database Server. Supported versions that are affected are 19.3-19.26. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Fleet Patching and amp; Provisioning...

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Fleet Patching and Provisioning versions 19.3 through 19.26 of...

PT-2025-16436 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.26 Description: The issue affects the Fleet Patching and Provisioning component of Oracle Database Server, allowing an unauthenticated attacker with network access via HTTP to compromise it...

agentic-fleet (>=0.1.6 <=0.4.81), composio (=0.1.1) +37 more potentially affected by CVE-2024-8952 via composio-core (>=0.3.13 <=0.7.21)

composio-core PYPI version =0.3.13, =0.1.6, =0.7.1, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.7.1, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.7.15, =0.3.13, =0.7.20 and more Source cves: CVE-2024-8952 Source advisory: SNYK:PYTHON-COMPOSIOCORE-9637813...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, helm-operator, melange, wolfictl, xeol, neuvector-scanner, rancher-fleet, fuse-overlayfs-snapshotter, spegel, helm-push, k3s, trivy, buildkitd, k8ssandra-client, kubevela, envoy-gateway, kubescape, linkerd2, kots, skaffold, chartmuseum,...