18758 matches found
CVE-2026-19926 Evergreen open-ils.fielder OpenSRF Service osrf-gateway-v1 sql injection
A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The explo...
CVE-2026-19926
CVE-2026-19926 affects Evergreen up to versions 3.14.11/3.15.11/3.16.5/3.17-beta1. The issue lies in an unknown function of the /osrf-gateway-v1 file of the OpenSRF Service (open-ils.fielder), allowing SQL injection through manipulation of that element. The vulnerability can be exploited remotely...
EUVD-2026-59132
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull called by batadvblaisbackbonegw could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...
VulnCheck KEV: CVE-2016-5312
Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...
CVE-2026-19188 Haiwell IoT Cloud HMI Gateway OS Command Injection
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...
CVE-2026-19188
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...
CVE-2026-19188
CVE-2026-19188 affects the Haiwell IoT Cloud HMI Gateway. The vulnerability is an OS command injection in the Net Check feature accessed via the /setting endpoint, where the cmdPing Socket.io event does not properly sanitize user input, allowing an attacker to inject and execute arbitrary OS comm...
GO-2025-3418 vulnerabilities
Vulnerabilities for packages: envoy-gateway...
GO-2026-4772 vulnerabilities
Vulnerabilities for packages: envoy-gateway, spire-server, kine, commercial-grafana, envoy-gateway-fips, commercial-expanso-edge, kots, commercial-chainloop-backend, k3s...
GO-2026-4771 vulnerabilities
Vulnerabilities for packages: vault-fips, gitaly, teleport, commercial-grafana, envoy-gateway-fips, vault...
GO-2025-3942 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, k8sgateway, kubernetes-dns-node-cache-fips, eks-distro-fips, juicefs, cloudflared, eks-distro, cloudflared-fips, k8sgateway-fips...
GO-2026-5094 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, envoy-gateway, gitness, gitlab-rails-ce, zot, argocd-image-updater, envoy-gateway-fips, portieris, gitlab-rails-ce-fips, kots, portieris-fips...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: k8ssandra-client, xeol, ocm-kubernetes-controller, kubescape-server, kgateway, kube-mgmt-fips, vcluster-fips, kube-mgmt, conftest-fips, cert-manager-cmctl-fips, argocd-image-updater, argo-cd-fips, helm-push, kyverno-fips, steampipe, argocd-image-updater-fips,...
GO-2026-5185 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, envoy-gateway, gitness, gitlab-rails-ce, zot, argocd-image-updater, envoy-gateway-fips, portieris, gitlab-rails-ce-fips, kots, portieris-fips...
GO-2025-3922 vulnerabilities
Vulnerabilities for packages: vcluster, rancher-fleet, tflint, filebrowser, opentofu, grafana-alloy, guac, trufflehog, gptscript, terragrunt, xeol, kubescape-operator, gitness, undock, gitleaks, zot, podman, k9s, zarf, envoy-gateway, nuclei, steampipe, trivy, nsc, trivy-operator, terraform...
GO-2026-4772 vulnerabilities
Vulnerabilities for packages: spire-server, k3s, kots, envoy-gateway, kine...
GO-2025-3418 vulnerabilities
Vulnerabilities for packages: envoy-gateway...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: pluto, flux-source-controller, cilium-cli, rancher-fleet, istio, linkerd2, eksctl, k8sgpt, kots, rancher-helm, helm-push, helm-operator, k8ssandra-client, chartmuseum, tw, cerbos, kargo, chart-testing, helm-docs, cluster-api-helm-controller, cert-manager-cmctl,...