GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kapp-controller, vcluster, spqr, grafana, cass-operator, cluster-api-provider-vsphere, kube-rbac-proxy, kuma, yunikorn-k8shim, kubernetes-csi-external-attacher, datadog-operator, cert-manager-webhook-pdns, kwok, kubescape-operator, helm-operator, cloud-provider-azure...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grpc-health-probe, zarf, sops, vcluster, tflint, rqlite, cloudnative-pg, terragrunt, trivy, step-ca, ksops, sigstore-scaffolding, kots, pulumi-language-dotnet, grafana-mimir, hubble-ui, temporal, conftest, falcosidekick, restic, k8sgpt-operator,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: traefik, rancher-fleet, kubescape-operator, teleport, vcluster, flux-helm-controller, dive, gitsign, trivy, slsa-verifier, flux-notification-controller, minio-operator, aactl, paranoia, tekton-chains, istio, vexctl, rke2-cloud-provider, bento, flux,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: net-kourier, multus-cni, kubernetes-dashboard-api, flux, promxy, victoriametrics-cluster, knative-serving, terraform-mcp-server, flux-source-controller, minio-object-browser, terraform-docs, rancher-telemetry, croc, crossplane-provider-azure-sql, scorecard,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: net-kourier, timoni, pulumi-language-yaml, spqr, cloudnative-pg, grafana, amazon-cloudwatch-agent-operator, kubernetes-dashboard-api, rook, flux, argo-rollouts, mc, flannel, promxy, nerdctl, temporal, snyk-cli, flux-image-automation-controller,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, podman-fips, helm-exporter, cosign, gomplate, beats-fips, opa-envoy, pulumi, kyverno, prometheus-fips, external-secrets-operator-fips, cert-manager-fips, dgraph, helm-mapkubeapis, prometheus-elasticsearch-exporter, hubble, consul-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, podman-fips, helm-exporter, cosign, gomplate, beats-fips, opa-envoy, pulumi, kyverno, prometheus-fips, external-secrets-operator-fips, cert-manager-fips, dgraph, helm-mapkubeapis, prometheus-elasticsearch-exporter, hubble, consul-fips,...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

Design/Logic Flaw

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2022-45326

CVE-2022-45326 affects Kwoksys Kwok Information Server — vulnerable component: XML processing (XXE) leading to server-side request forgery (SSRF). Affected: versions before 2.9.5.SP31; root cause is an XML external entity vulnerability. Impact as described: remote authenticated users can trigger ...

PT-2022-27466 · Kwoksys · Kwok Information Server

Name of the Vulnerable Software and Affected Versions: Kwoksys Kwok Information Server versions prior to 2.9.5.SP31 Description: An XML external entity XXE injection issue allows remote authenticated users to conduct server-side request forgery SSRF attacks. This enables attackers to manipulate t...

CVE-2022-45326

An XML external entity XXE injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery SSRF attacks...

CVE-2013-5028

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

Sql injection

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

CVE-2013-5028

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

CVE-2013-5028

Kwoksys Kwok Information Server vulnerable to SQL injection in IT/hardware-list.dll (versions before 2.8.5). Affected component is the search command handling (hardwareType, hardwareStatus, hardwareLocation) with remote-authenticated access leading to arbitrary SQL execution. Root cause is improp...

Kwok Information Server 2.7.3 / 2.8.4 SQL Injection Vulnerability

Kwok Information Server versions 2.7.3 and 2.8.4 suffer from a remote blind SQL injection vulnerability. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ || || || Advisory : Kwok Information Server Blind Sql Injection || || Affected Version : 2.7.3 & 2.8.4 || || Vendor :...

Kwok Information Server 2.7.3 / 2.8.4 SQL Injection

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ || || || Advisory : Kwok Information Server Blind Sql Injection || || Affected Version : 2.7.3 & 2.8.4 || || Vendor : http://www.kwoksys.com/index.php || || Risk : Medium || || CVE-ID : 2013-5028 || || Tested on Platform : Windows...