GO-2026-6094 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, tekton-chains, k3s, tekton-pipelines, cert-manager-istio-csr, cloud-provider-gcp-cloud-controller-manager, flux-notification-controller, node-feature-discovery, cilium, cluster-api-helm-controller, grafana, rancher-agent,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opa, k3s, vcluster, grafana-agent-operator, sigstore-scaffolding, kaniko, dagger, kwok, terraform-provider-google, k3d, k8sgpt, osv-scanner, fulcio, conftest, guac, cloudnative-pg, dex, kargo, grafana-mimir, spicedb, ferretdb, opentelemetry-collector, terraform-docs,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, traefik, tekton-chains, k3s, vcluster, flux-notification-controller, vexctl, kyverno, trivy-operator, lazydocker, kwok, trufflehog, harbor-scanner-trivy, k3d, openbao, k9s, osv-scanner, manifest-tool, slsa-verifier, vault-secrets-webhook,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: db-operator, knative-client, kpt, pulumi-language-java, task, grafana-agent-operator, kubernetes-dashboard-api, snyk-cli, grafana, tetragon, rancher-agent, terraform-provider-pagerduty, k8s-device-plugin, cadvisor, aws-flb-firehose, cert-manager-csi-driver,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: task, grafana, tetragon, terraform-provider-pagerduty, cadvisor, aws-flb-firehose, newrelic-infrastructure-agent, harbor-scanner-trivy, wave, tkn, spqr, vt-cli, oras, manifest-tool, datadog-agent, volume-modifier-for-k8s, grafana-mimir, argo-rollouts, helm-push,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, argo-cd, cilium-envoy, runc, seaweedfs, act, rancher-fleet, cert-manager-cmctl, etcd-fips, flux-fips, zot, eksctl, nats-fips, podman-fips, kbld, tekton-chains-fips, nerdctl, trivy-operator-fips, argo-workflows-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, argo-cd, cilium-envoy, runc, seaweedfs, act, rancher-fleet, cert-manager-cmctl, etcd-fips, flux-fips, zot, eksctl, nats-fips, podman-fips, kbld, tekton-chains-fips, nerdctl, trivy-operator-fips, argo-workflows-fips,...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

Design/Logic Flaw

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

PT-2022-27466 · Kwoksys · Kwok Information Server

Name of the Vulnerable Software and Affected Versions: Kwoksys Kwok Information Server versions prior to 2.9.5.SP31 Description: An XML external entity XXE injection issue allows remote authenticated users to conduct server-side request forgery SSRF attacks. This enables attackers to manipulate t...

CVE-2022-45326: Improper Restriction of XML External Entity Reference

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

CVE-2022-45326 affects Kwoksys Kwok Information Server — vulnerable component: XML processing (XXE) leading to server-side request forgery (SSRF). Affected: versions before 2.9.5.SP31; root cause is an XML external entity vulnerability. Impact as described: remote authenticated users can trigger ...

CVE-2013-5028

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

Sql injection

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

CVE-2013-5028

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

CVE-2013-5028

Kwoksys Kwok Information Server vulnerable to SQL injection in IT/hardware-list.dll (versions before 2.8.5). Affected component is the search command handling (hardwareType, hardwareStatus, hardwareLocation) with remote-authenticated access leading to arbitrary SQL execution. Root cause is improp...

PT-2013-5338

Name of the Vulnerable Software and Affected Versions Kwok Information Server versions prior to 2.8.5 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the hardwareType, hardwareStatus, or hardwareLocation parameter in a search...