GO-2024-2860 vulnerabilities

Vulnerabilities for packages: goreleaser...

GO-2026-5585 vulnerabilities

Vulnerabilities for packages: versitygw-fips, gatus, versitygw, gatus-fips...

GO-2025-3842 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2026-5558 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2026-4896 vulnerabilities

Vulnerabilities for packages: minio...

GO-2022-0587 vulnerabilities

Vulnerabilities for packages: opa...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2026-5008 vulnerabilities

Vulnerabilities for packages: goreleaser...

GO-2023-1702 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go...

WordPress WP Crowdfunding plugin < 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Jakub Herman in WordPress Plugin WP Crowdfunding versions 2.2.1...

PT-2026-75964

Summary Description An Insecure Default Initialization of Resource CWE-1188 issue in the OpenAM default configuration ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false. Also, the iPlanetDirectoryPro SSO cookie is used as a CSRF token in OAuth/OIDC flows. This affects OpenAM Community...

PT-2026-76567

Summary Description An Insecure Default Initialization of Resource CWE-1188 issue in the OpenAM default configuration ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false. Also, the iPlanetDirectoryPro SSO cookie is used as a CSRF token in OAuth/OIDC flows. This affects OpenAM Community...

CVE-2026-73039

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing history, and manipulate other users'...

CVE-2026-73039

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing history, and manipulate other users'...

CVE-2026-73039 streama Insecure Direct Object Reference via ViewingStatusController

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing history, and manipulate other users'...

CVE-2026-54399 vulnerabilities

Vulnerabilities for packages: zipkin, wazuh-indexer, conductor, geoserver, logstash, traccar-fips, nacos, elasticsearch, jmeter, logstash-fips, kayenta-fips, floci-az, apache-hop, nrjmx, cassandra-reaper, sonarqube, hadoop-fips, druid, nuxeo, opensearch, akhq, apicurio-registry, pinot,...

CVE-2026-10571

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled...

EUVD-2026-58359

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled...

CVE-2026-10571 IBM WebSphere Application Server Liberty is affected by a denial of service

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled...

CVE-2026-10571

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled...