1156147 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization due to insufficient enforcement of host revocation and operator status during certificate issuance and renewal processes. An attacker can regain valid certificates for blocked or offboarded hosts by re-enrolling or...
GHSA-XCGV-8MV7-V8C7 vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, commercial-expanso-edge, prometheus-mongodb-exporter, opentelemetry-collector-k8s, ocm-kubernetes-controller-fips, podman-fips, flux, harbor-fips, dataplaneapi, apm-server, kubernetes-dashboard, cerbos, grafana-alloy-fips, harbor, keda,...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: go-msft, commercial-expanso-edge, opentelemetry-collector-k8s, athenz-csi-driver, crossplane-provider-aws-route53recoveryreadiness-fips, azure-service-operator-fips, apm-server, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-batch-fips,...
GHSA-XCGV-8MV7-V8C7 vulnerabilities
Vulnerabilities for packages: scorecard, kubernetes-csi-node-driver-registrar, src, buildkitd, kube-fluentd-operator, nerdctl, k3s, snyk-cli, k8s-device-plugin, kubernetes, vexctl, karpenter, flux, docker, containerd, caddy, istio, undock, prometheus, grafana-alloy, cerbos, kubeflow-katib, builda...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, nri-elasticsearch, snyk-cli, nri-kafka, cortex, speedtest-go, harbor, cadvisor, kubernetes-replicator, cert-manager-webhook-pdns, vault-env, crossplane-provider-aws-kms, grafana-mimir, kube-logging-operator-custom-runner, aws-nuke,...
New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from. Each is a different way to break a machine: wipe the whole disk,...
Malicious code in eslint-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc3baf80e31e8027d7bb5b3fe5a873c5ff72d8344d39f8f01e191699a2310d7 Package declares postinstall: node lib/utils/index.js, which spawns a detached, stdio-suppressed Node child spawn with detached:true, stdio:'ignore',...
MAL-2026-10087 Malicious code in eslint-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc3baf80e31e8027d7bb5b3fe5a873c5ff72d8344d39f8f01e191699a2310d7 Package declares postinstall: node lib/utils/index.js, which spawns a detached, stdio-suppressed Node child spawn with detached:true, stdio:'ignore',...
PYSEC-2026-3191 `CHECK`-failures in binary ops in Tensorflow
Impact A malicious user can cause a denial of service by altering a SavedModel such that any binary op would trigger CHECK failures. This occurs when the protobuf part corresponding to the tensor arguments is modified such that the dtype no longer matches the dtype expected by the op. In that cas...
`CHECK`-failures in binary ops in Tensorflow
ImpactA malicious user can cause a denial of service by altering a SavedModel such that any binary op would trigger CHECK failures. This occurs when the protobuf part corresponding to the tensor arguments is modified such that the dtype no longer matches the dtype expected by the op. In that case...
CVE-2026-42486
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
ALPINE-CVE-2026-42486
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
ALPINE-CVE-2026-23562
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
CVE-2026-23562
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
CVE-2026-23561
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
ALPINE-CVE-2026-23561
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
ALPINE-CVE-2026-23559
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
CVE-2026-23559
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
CVE-2026-23560
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...
ALPINE-CVE-2026-23560
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...