PT-2026-77595

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. An unauthenticated attacker with network access via HTTP...

PT-2026-77898

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description An issue exists in the Agent infrastructure component of Oracle Access Manager. An unauthenticated attacker with network access via SAML Security...

PT-2026-77711

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Install. The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data...

PT-2026-77585

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. An unauthenticated attacker with network access via HTTP...

PT-2026-77958

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

PT-2026-77940

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77389

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the Server Infrastructure component of the Siebel CRM Deployment product. An unauthenticated attacker with network access via HTTP can compromise the system. Successfu...

PT-2026-77553

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Common Events component of Oracle Hyperion Infrastructure Technology. An unauthenticated attacker with network access via HTTP can compromise th...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: athenz-cert-manager-issuer-fips, crossplane-provider-aws-keyspaces, gitlab-operator, prometheus-operator, crossplane-provider-aws-athena-fips, kuma, prometheus-adapter-fips, crossplane-provider-aws-kinesisanalytics, k8ssandra-operator-fips, sqlexporter, mcp-grafana,...

GO-2024-2500 vulnerabilities

Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...

GO-2022-0968 vulnerabilities

Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, k3d, kubeflow-fips, terraform-provider-sendgrid...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: zot, cert-manager-cmctl-fips, cerbos-fips, cluster-api-helm-controller-fips, pluto, kuma, rancher-fleet, helm-operator-fips, helm-mapkubeapis, trivy-operator, headlamp-fips, kargo, cert-manager-cmctl, chart-testing-fips, cilium-cli, flux-source-controller-fips,...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: zot, podman, skopeo, skaffold, cadvisor, kubernetes, wolfictl, kots, docker, k3d, trivy, newrelic-infrastructure-agent, ctop, runc, grype, k9s, syft, buildkitd, k3s, zarf, kubescape, kaniko, nerdctl...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: prometheus-operator, kuma, gitlab-rails-ce, reports-server, tekton-pipelines, falco-no-driver, knative-eventing-fips, flux, minio, frankenphp-8.5, commercial-expanso-edge, keda-fips, knative-serving-fips, buildah, elastic-agent-fips, gitlab-workhorse-ce,...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: grype, kots, skaffold, syft, runc, skopeo, zot, kubernetes, wolfictl, cadvisor, newrelic-infrastructure-agent, k3d, buildkitd, podman, kaniko, nerdctl, k3s, docker, trivy, k9s, zarf, kubescape, ctop...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: melange, grype, flux-helm-controller, eksctl, fuse-overlayfs-snapshotter, kots, up, skaffold, zot, gitness, helm, cilium-cli, kubevela, k8sgpt, flux-source-controller, newrelic-infrastructure-agent, k3d, buildkitd, kaniko, helm-push, trivy, kubescape, ctop...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, trillian, eksctl, temporal-server, crossplane-provider-aws-cloudwatchlogs, cert-exporter, kubernetes-csi-external-provisioner, minio-object-browser, bento, gomplate, hugo, promxy, dbmate, vault-secrets-webhook, age, containerd,...

CVE-2026-18164

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-225-01...

Malicious code in @opezneppelin/contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe04ec28ed56cb0a253131129df8078d425f8a0c579c439ced9c75b6977a6ab @opezneppelin/contracts is a typosquat of @openzeppelin/contracts. Its postinstall lifecycle script scripts/postinstall.js hex-escapes all module...

Malicious code in date-fmt-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae88f68f30ebd69a595537393ce95c4ce5e543b558572769fa2c608fa1b1b0d The package presents itself as a date-formatting utility, but its index.js is a trivial cover and a source comment explicitly labels the library as a...