GO-2023-1849 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-4160 vulnerabilities

Vulnerabilities for packages: zarf, k9s...

GO-2023-1827 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: openbao, trufflehog, xeol, sftpgo-plugin-auth, rancher-webhook, terraform, bento, flux-source-controller, percona-server-mongodb-operator, flux, rclone, external-secrets-operator, frp, cert-manager-cmctl, harbor, gitea, opentofu, juicefs, spqr, gitlab-runner, kyverno...

GO-2026-5235 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: ko, vcluster, cloud-provider-azure, cluster-api-provider-vsphere, prometheus, sftpgo, spire-server, xeol, snyk-cli, docker-machine-driver-harvester, step-ca, crossplane-provider-aws-ec2, kapp, vitess, knative-serving, temporal, crossplane-provider-aws-sqs,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: ko, prometheus, spire-server, xeol, step-ca, amazon-cloudwatch-agent-operator, azcopy, flux-source-controller, falcoctl, kyverno-policy-reporter-ui, goreleaser, splunk-otel-collector, step-kms-plugin, k3s, velero-plugin-for-microsoft-azure, dgraph, mongo-tools,...

Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by uncontrolled resource consumption and denial of service CVE-2026-50645, CVE-2026-9322, CVE-2026-9171. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling and a denial of service. This affects IBM WebSphere Application Server Liberty with the servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, servlet-6.1,...

CVE-2026-19791

CVE-2026-19791 – Tenda G0 httpd web management interface : A stack-based buffer overflow in the addStaticRoute function (file /goform/module) of the httpd web management interface. By manipulating the staticRouteNet argument, remote attackers could overflow the stack. Exploitation is possible rem...

CVE-2026-19790 Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19790

Tenda G0 devices with the httpd Web Management Interface are affected. The vulnerability lies in the formSetPortMirror function (in /goform/module), where manipulating the portMirrorMirroredPorts argument causes a stack-based overflow. This can be triggered remotely and has publicly available exp...

CVE-2026-19787

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-19787

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-58572

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-15970 vulnerabilities

Vulnerabilities for packages: consul-fips...

CVE-2026-19767

A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has been made...

CVE-2026-19767

A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has been made...