GO-2026-6094 vulnerabilities

Vulnerabilities for packages: datadog-agent, kubernetes-csi-external-provisioner, cluster-api, zot, calico, telegraf, openbao, cert-manager, flux-kustomize-controller, cluster-api-ipam-provider-in-cluster, k3s, kubescape, cilium, cloud-provider-aws, gitlab-kas, cluster-api-helm-controller, openfg...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: melange, fulcio, opentelemetry-collector, kots, cert-manager-cmctl, certificate-transparency, kubernetes-csi-external-provisioner, spire-server, osv-scanner, cloudnative-pg, dagger, gomplate, kubernetes-csi-driver-hostpath, pulumi-language-dotnet, dbmate, spegel,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: ko, flux-helm-controller, eksctl, harbor, spire-server, bento, osv-scanner, trufflehog, vault-secrets-webhook, lazydocker, kyverno-notation-aws, vcluster, zot, rke2-cloud-provider, harbor-scanner-trivy, aactl, dagdotdev, kubescape-operator, gh, dive, knative-serving,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: eksctl, kubernetes-event-exporter, neuvector-scanner, dbmate, vault-secrets-webhook, calico, pgpool2exporter, delve, harbor-cli, hugo-extended, terraform-provider-pagerduty, fscrypt, prometheus-operator, cluster-proportional-autoscaler, trivy-operator,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: trillian, terraform-provider-time, datadog-agent, eksctl, fuse-overlayfs-snapshotter, minio-object-browser, kubernetes-event-exporter, bento, neuvector-scanner, osv-scanner, runc, promxy, cri-tools, dbmate, vault-secrets-webhook, zot, grafana-rollout-operator,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: dive, prometheus-operator, prometheus-podman-exporter-fips, gitlab-operator, kuma, gitlab-rails-ce, net-kourier-fips, redka, grafana-operator, falco-no-driver, knative-eventing-fips, atlas-fips, atlantis-fips, envconsul, knative-serving-fips, cilium-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: dive, prometheus-operator, prometheus-podman-exporter-fips, gitlab-operator, kuma, gitlab-rails-ce, net-kourier-fips, redka, grafana-operator, falco-no-driver, knative-eventing-fips, atlas-fips, atlantis-fips, envconsul, knative-serving-fips, cilium-fips,...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

Design/Logic Flaw

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

CVE-2022-45326 affects Kwoksys Kwok Information Server — vulnerable component: XML processing (XXE) leading to server-side request forgery (SSRF). Affected: versions before 2.9.5.SP31; root cause is an XML external entity vulnerability. Impact as described: remote authenticated users can trigger ...

PT-2022-27466 · Kwoksys · Kwok Information Server

Name of the Vulnerable Software and Affected Versions: Kwoksys Kwok Information Server versions prior to 2.9.5.SP31 Description: An XML external entity XXE injection issue allows remote authenticated users to conduct server-side request forgery SSRF attacks. This enables attackers to manipulate t...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2013-5028

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

Sql injection

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

CVE-2013-5028

Kwoksys Kwok Information Server vulnerable to SQL injection in IT/hardware-list.dll (versions before 2.8.5). Affected component is the search command handling (hardwareType, hardwareStatus, hardwareLocation) with remote-authenticated access leading to arbitrary SQL execution. Root cause is improp...

CVE-2013-5028

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

Kwok Information Server 2.7.3 / 2.8.4 SQL Injection Vulnerability

Kwok Information Server versions 2.7.3 and 2.8.4 suffer from a remote blind SQL injection vulnerability. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ || || || Advisory : Kwok Information Server Blind Sql Injection || || Affected Version : 2.7.3 & 2.8.4 || || Vendor :...

Kwok Information Server 2.7.3 / 2.8.4 SQL Injection

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ || || || Advisory : Kwok Information Server Blind Sql Injection || || Affected Version : 2.7.3 & 2.8.4 || || Vendor : http://www.kwoksys.com/index.php || || Risk : Medium || || CVE-ID : 2013-5028 || || Tested on Platform : Windows...