9704 matches found
HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass
HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22 contains an authentication bypass vulnerability which could be remotely exploited to bypass remote authentication and possibly lead to execution of arbitrary commands, gaining...
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution
Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...
Zitadel - User Registration Bypass
The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: sonobuoy, crossplane-provider-aws-securityhub, hubble-fips, azurefile-csi, kapp-controller-fips, nodetaint-fips, rancher-system-agent, spire-controller-manager-fips, crossplane-provider-aws-cloudcontrol, kiali-fips, plutono, cluster-api,...
GO-2024-2500 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, rancher-machine...
GO-2022-0968 vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, k3d, dynamic-localpv-provisioner, kubeflow-fips, terraform-provider-sendgrid...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: flux-fips, kuma, headlamp, cerbos-fips, cluster-api-helm-controller-fips, consul-k8s-fips, helm-mapkubeapis, eksctl, nova, kots, kubescape, helm-push, envoy-gateway-fips, flux-helm-controller-fips, pluto-fips, trivy, chart-testing, rancher-fleet, chartmuseum, tw,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: k3d, kots, kubescape, trivy, podman, nerdctl, skopeo, newrelic-infrastructure-agent, grype, buildkitd, cadvisor, syft, docker, runc, k3s, ctop, zarf, kaniko, skaffold, k9s, kubernetes, zot, wolfictl...
GO-2026-5005 vulnerabilities
Vulnerabilities for packages: vitess, grafana, gitlab-rails-ce, keda-fips, argo-workflows-fips, opentelemetry-collector, argo-cd-fips, tekton-pipelines-fips, gitlab-rails-ce-fips, podman-fips, gitlab-workhorse-ce-fips, tigera-operator, teleport-operator-fips, mattermost-fips, kubernetes, helm,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: kaniko, cadvisor, kubescape, ctop, nerdctl, grype, skopeo, podman, zot, trivy, k9s, k3d, buildkitd, kots, newrelic-infrastructure-agent, zarf, syft, skaffold, docker, kubernetes, runc, k3s, wolfictl...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: cilium-cli, kaniko, helm, helm-push, flux-helm-controller, kubescape, gitness, ctop, grype, kubevela, melange, zot, flux-source-controller, trivy, k3d, buildkitd, kots, newrelic-infrastructure-agent, k8sgpt, eksctl, skaffold, up, fuse-overlayfs-snapshotter...
GO-2025-4135 vulnerabilities
Vulnerabilities for packages: wireguard-go, cloud-provider-vsphere, boring-registry, xeol, timescaledb-parallel-copy, kube-vip, argo-cd, k6, nginx-prometheus-exporter, git-lfs, cloudnative-pg, sftpgo, descheduler, crossplane-provider-azure-storage, docker, rancher-webhook, cfssl, kine, openbao-k8...
Malicious code in @opezneppelin/contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe04ec28ed56cb0a253131129df8078d425f8a0c579c439ced9c75b6977a6ab @opezneppelin/contracts is a typosquat of @openzeppelin/contracts. Its postinstall lifecycle script scripts/postinstall.js hex-escapes all module...
Malicious code in date-fmt-utils-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae88f68f30ebd69a595537393ce95c4ce5e543b558572769fa2c608fa1b1b0d The package presents itself as a date-formatting utility, but its index.js is a trivial cover and a source comment explicitly labels the library as a...
RHSA-2026:47126 Red Hat Security Advisory: resource-agents security update
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.2 security update
The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...
CVE-2026-67558
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/66wymlkohacrk...
EUVD-2026-56724
CVET-EOP...
